CloudHacker Noonabout 3 hours ago
AutoGPT Email Block SSRF Flaw Fixed
5 min read
CVE-2026-33234 in AutoGPT's SendEmailBlock lets authenticated users scan internal networks and leak service banners via smtplib.SMTP raw TCP connections, bypassing HTTP-only IP blocklists. The fix in autogpt-platform-backend 0.6.52 extends blocklist validation to the SMTP path, reducing DNS rebinding and TOCTOU risks.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
Summary by ByteBrief
