CVE-2026-55237 | Significant-Gravitas AutoGPT up to 0.6.61 Link router.push cross site scripting (GHSA-j2cp-jg5q-38wj)

June 18, 2026 Yanac

A vulnerability classified as problematic has been found in Significant-Gravitas AutoGPT up to 0.6.61. Impacted is the function router.push of the component Link Handler. The manipulation leads to improper neutralization of alternate xss syntax.

This vulnerability is referenced as CVE-2026-55237. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More