EUVD-2025-28710Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessGain low-privileged access
-
ExploitSend crafted request with path traversal payload
-
Executiondownload_attachment reads arbitrary file
-
ImpactExfiltrate file contents
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Path canonicalization, traversal prevention
MITRE ATT&CK
2 techniques across 2 tactics: Discovery, Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires low-privileged access to the SuperAGI application (PR:L) and adjacent network access (AV:A). The attacker must be able to interact with the EmailToolKit's download_attachment function. No user interaction is needed. The vulnerability is limited to reading files, not writing or executing. |
| Impact | CVSS 4.0 base score is 2.0 (Low) with vector AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L, indicating low impact and requiring adjacent network access and low privileges. EPSS score is 0.18% (40th percentile), suggesting low exploitation probability. Public exploit code exists but no CISA KEV listing. The risk is low due to limited impact and required privileges. |
| Exploit ScenarioDerived | An attacker with low-privileged access to the SuperAGI instance sends a crafted request to the download_attachment function with a filename containing '../' sequences, allowing them to read sensitive files like configuration or credentials from the server. Public exploit code is available, simplifying the attack. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv2 – Jul 26, 2026
Path traversal vulnerability in SuperAGI up to 0.0.14 allows attackers to read arbitrary files via the download_attachment function in EmailToolKit. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.18%), indicating limited exploitation likelihood.
Earlier versions of this analysis (1)
RemediationAI
Upgrade to a patched version of SuperAGI beyond 0.0.14 once available. As a workaround, restrict access to the EmailToolKit functionality or implement input validation on the filename parameter to prevent path traversal. Monitor the GitHub repository for official patches.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability is a path traversal (CWE-22) in the EmailToolKit component of SuperAGI, an open-source AI agent framework. The function download_attachment in SuperAGI/superagi/helper/read_email.py does not properly sanitize the filename argument, allowing an attacker to traverse directories and read arbitrary files on the server. CPE data confirms all versions from 0.0.1 to 0.0.14 are affected.
Know when Superagi gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Adjacent network, low privileges, low confidentiality impact only.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function download_attachment of the file SuperAGI/superagi/helper/read_email.py of the component EmailToolKit. The manipulation of the argument filename leads to path traversal. The exploit has been disclosed to the public and may be used.
Executive ViewAI
Organizations using TransformerOptimus SuperAGI should be aware of moderate risk from CVE-2025-6280, a path traversal vulnerability rated CVSS 5.5. This could allow unauthorized file access. Proof-of-concept code is publicly available. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: restrict file access via WAF, implement allowlists.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.
A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. Ra
An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. Rated hi
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. Rated high severity
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. Rated medium severi
In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in
Cross-organization tool metadata read and modification in SuperAGI v0.0.14 allows an authenticated attacker in one tenan
Cross-tenant agent execution manipulation in SuperAGI up to v0.0.14 lets a remote authenticated user in one organization
Remote unauthenticated access to vector database configurations in TransformerOptimus SuperAGI ≤0.0.14 allows attackers
Path traversal in TransformerOptimus SuperAGI versions up to 0.0.14 allows remote unauthenticated attackers to read, wri
Cross-organization agent hijacking in SuperAGI 0.0.14 and earlier lets any authenticated user on a shared multi-tenant i
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. Rated high severity (CVSS 7.5), this v
TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attackers to bypass authorization controls
Exploit-DB