EUVD-2026-23789
GHSA-6fpm-qhmq-mwq8
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
8DescriptionCVE.org
A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14. This impacts the function get_agent_execution/update_agent_execution of the file superagi/controllers/agent_execution.py of the component Agent Execution Endpoint. Executing a manipulation of the argument agent_execution_id can lead to authorization bypass. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attackers to bypass authorization controls in the Agent Execution Endpoint by manipulating the agent_execution_id parameter in get_agent_execution and update_agent_execution functions. An attacker with valid credentials can access or modify agent execution records they should not have permission to interact with. Publicly available exploit code exists, and the vendor did not respond to early disclosure notification.
Technical ContextAI
The vulnerability resides in superagi/controllers/agent_execution.py, specifically in the get_agent_execution and update_agent_execution endpoint handlers that process agent execution requests. The root cause is CWE-639 (Authorization Bypass Through User-Controlled Key), where the application fails to properly validate that the authenticated user has authorization to access the specific agent_execution_id before returning or modifying execution records. This is a classic insecure direct object reference (IDOR) flaw where sequential or enumerable IDs allow an attacker to bypass authorization checks by simply changing the ID parameter. The vulnerability affects the TransformerOptimus SuperAGI framework (CPE: cpe:2.3:a:transformeroptimus:superagi), an AI-based automation platform.
RemediationAI
Upgrade to a patched version of SuperAGI if available from the vendor; however, no specific fix version has been independently confirmed at this time due to the vendor's non-response to disclosure. As a compensating control, implement authorization checks at the application level: verify that the authenticated user owns or has explicit permission to access the requested agent_execution_id before processing get_agent_execution or update_agent_execution requests. At the network level, restrict access to the Agent Execution Endpoint to trusted internal networks or require additional authentication factors (e.g., API key validation) beyond standard user credentials. Disable or remove the SuperAGI deployment from internet-facing access until an official patch is released. Monitor access logs for suspicious patterns of agent_execution_id enumeration or unauthorized modification attempts. Contact TransformerOptimus directly or check their GitHub repository (https://github.com/TransformerOptimus/SuperAGI) for security updates, as the vendor did not respond to the early disclosure but may publish a fix without formal announcement.
A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. Ra
An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. Rated hi
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. Rated high severity
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. Rated medium severi
In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in
Remote unauthenticated access to vector database configurations in TransformerOptimus SuperAGI ≤0.0.14 allows attackers
Path traversal in TransformerOptimus SuperAGI versions up to 0.0.14 allows remote unauthenticated attackers to read, wri
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. Rated high severity (CVSS 7.5), this v
Server-side request forgery (SSRF) in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attac
Authorization bypass in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attackers to access
Authorization bypass in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated attackers to manipulate th
Authorization bypass in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated users to modify arbitrary
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today