GitHub Repos· Sep 15, 2026· by pavanchow🔍 CVE-2026-33234

pavanchow/CVE-2026-33234

SSRF via smtplib raw TCP sockets bypassing HTTP blocklist in AutoGPT SendEmailBlock

🎯 Vulnerability: Server-Side Request Forgery (SSRF)

💡 Defense Fix: Enforce URL whitelisting, block private IP ranges (10.0.0.0/8, 169.254.169.254), and mandate AWS IMDSv2 headers.

#autogpt#cve#cybersecurity#python#security#ssrf#vulnerability-research#CVE-2026-33234