CVE-2026-33234 let authenticated AutoGPT users scan internal networks and leak SSH banners through its unprotected SMTP connection path.