EUVD-2026-23719Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
8DescriptionCVE.org
A vulnerability has been found in TransformerOptimus SuperAGI up to 0.0.14. This affects the function delete_api_key/edit_api_key of the file superagi/controllers/api_key.py of the component API Key Management Endpoint. The manipulation leads to authorization bypass. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Authorization bypass in TransformerOptimus SuperAGI API Key Management allows authenticated users to delete or edit arbitrary API keys beyond their own permissions, affecting versions up to 0.0.14. The vulnerability exists in the delete_api_key and edit_api_key endpoints and enables authenticated attackers to manipulate other users' credentials remotely with low complexity. Publicly available exploit code exists, and the vendor has not responded to early disclosure.
Technical ContextAI
The vulnerability resides in the API Key Management component (superagi/controllers/api_key.py) of SuperAGI, an AI agent framework. The root cause is classified as CWE-639 (Authorization Bypass Through User-Controlled Key), indicating insufficient validation of user permissions when processing API key modification requests. The affected endpoints (delete_api_key and edit_api_key) fail to properly verify that the authenticated user has authority to modify the targeted API key, allowing lateral privilege escalation within the application. This is a common flaw in REST API implementations where authorization checks are omitted or improperly scoped to user identity rather than resource ownership.
RemediationAI
No vendor-released patch has been identified at time of analysis. Organizations should immediately implement network-level access controls restricting the API Key Management endpoints (superagi/controllers/api_key.py delete_api_key and edit_api_key) to trusted internal networks only, blocking external access. Additionally, implement API gateway authentication enforcement that validates user identity and adds per-request authorization logging for all API key operations. If SuperAGI is user-facing, restrict API key management functionality to administrative users only via role-based access control within the application layer. Monitor API request logs for suspicious patterns of API key modifications by non-administrative accounts targeting resources outside their own ID namespace. Consider upgrading to a patched version when available, or isolate the affected deployment until a fix is released. The risk-benefit trade-off of restricting access is minimal since API key management is typically an administrative function.
A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. Ra
An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. Rated hi
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. Rated high severity
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. Rated medium severi
In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in
Remote unauthenticated access to vector database configurations in TransformerOptimus SuperAGI ≤0.0.14 allows attackers
Path traversal in TransformerOptimus SuperAGI versions up to 0.0.14 allows remote unauthenticated attackers to read, wri
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. Rated high severity (CVSS 7.5), this v
TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attackers to bypass authorization controls
Server-side request forgery (SSRF) in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attac
Authorization bypass in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attackers to access
Authorization bypass in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated attackers to manipulate th
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today