An authentication bypass vulnerability has been found in Thesamur's AutoGPT. This vulnerability allows an attacker to bypass authentication mechanisms. Once inside the web application, the attacker can use any of its features regardless of the authorisation method used.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Thesamur | AutoGPT | unaffected |
|
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution has been reported at this time.
Workaround
No workaround given by the vendor.
References
History
Thu, 19 Feb 2026 09:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An authentication bypass vulnerability has been found in Thesamur's AutoGPT. This vulnerability allows an attacker to bypass authentication mechanisms. Once inside the web application, the attacker can use any of its features regardless of the authorisation method used. | |
| Title | Authentication bypass in AutoGPT de Thesamur | |
| First Time appeared |
Thesamur
Thesamur autogpt |
|
| Weaknesses | CWE-287 | |
| CPEs | cpe:2.3:a:thesamur:autogpt:all_versions:*:*:*:*:*:*:* | |
| Vendors & Products |
Thesamur
Thesamur autogpt |
|
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: INCIBE
Published:
Updated: 2026-02-19T08:50:36.880Z
Reserved: 2025-04-16T09:09:25.290Z
Link: CVE-2025-41023
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses