CVE-2026-65699 | reworkd AgentGPT up to 1.0.0 AgentCRUD.create_task/validate_task_count run_id authorization

July 23, 2026 Yanac

A vulnerability was found in reworkd AgentGPT up to 1.0.0. It has been declared as critical. Affected is the function AgentCRUD.create_task/validate_task_count. Such manipulation of the argument run_id leads to authorization bypass. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is documented as CVE-2026-65699. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More