CVE-2026-72922 | Significant-Gravitas AutoGPT up to 0.6.69 Webhook Ingress router.py webhook_ingress_generic provider data authenticity

A vulnerability described as critical has been identified in Significant-Gravitas AutoGPT up to 0.6.69. Impacted is the function webhook_ingress_generic of the file autogpt_platform/backend/backend/api/features/integrations/router.py of the component Webhook Ingress. Executing a manipulation of the argument provider can lead to insufficient verification of data authenticity.

This vulnerability is tracked as CVE-2026-72922. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.