# How an AutoGPT Email Block Became an SSRF Surface

Page: https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646/how-an-autogpt-email-block-became-an-ssrf-surface
Text version: https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646/how-an-autogpt-email-block-became-an-ssrf-surface.md
Podcast: [Cybersecurity Tech Brief By HackerNoon](https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646)
Published: 2026-08-21T16:01:03+00:00
Episode link: https://share.transistor.fm/s/01ce98bc
Audio file: https://media.transistor.fm/01ce98bc/284028d9.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/cybersecurity-tech-brief-by-hackernoon-6365646/episodes/how-an-autogpt-email-block-became-an-ssrf-surface
Duration seconds: 401

## Resource

This story was originally published on HackerNoon at: https://hackernoon.com/how-an-autogpt-email-block-became-an-ssrf-surface . CVE-2026-33234 let authenticated AutoGPT users scan internal networks and leak SSH banners through its unprotected SMTP connection path. Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity . You can also check exclusive content about #cybersecurity , #cve , #autogpt , #ai-and-ml , #ai-security , #network-security , #vulnerability , #pavan-nallamothu , and more. This story was written by: @pavanchow . Learn more about this writer by checking @pavanchow's about page, and for more stories, please visit hackernoon.com . AutoGPT enforces strict SSRF protections on its HTTP layer. But the SendEmailBlock uses Python's smtplib to open raw TCP sockets, bypassing the blocklist entirely. Pointing this block at internal SSH or Redis ports forces smtplib to throw an exception that leaks the service banner directly in the API response. Authenticated users can map the internal network and identify vulnerable services from a single text field. Fixed in backend 0.6.52 by extending IP validation to all outbound protocols.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/cybersecurity-tech-brief-by-hackernoon-6365646/episodes/how-an-autogpt-email-block-became-an-ssrf-surface/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646/how-an-autogpt-email-block-became-an-ssrf-surface.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.