EUVD-2026-23785
GHSA-2chg-78hj-c2w2
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
8DescriptionCVE.org
A security flaw has been discovered in TransformerOptimus SuperAGI up to 0.0.14. Affected by this vulnerability is the function get_project/update_project/get_projects_organisation of the file superagi/controllers/project.py. The manipulation results in authorization bypass. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Authorization bypass in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attackers to access or modify project data without proper authorization checks in the project controller endpoints (get_project, update_project, get_projects_organisation). The vulnerability has publicly available exploit code and affects the project management functionality with limited confidentiality and integrity impact. The vendor did not respond to early disclosure notification.
Technical ContextAI
SuperAGI is a framework for building autonomous AI agents. The vulnerability resides in the project controller module (superagi/controllers/project.py), specifically in three endpoint handlers that manage project operations. The root cause is CWE-639 (Authorization Bypass Through User-Controlled Key), indicating that the application fails to properly validate whether the authenticated user has permission to access or modify the requested project resource. The affected endpoints likely use user-supplied project identifiers without sufficient authorization checks, allowing an attacker with valid credentials to enumerate, read, or modify projects they do not own or have access to.
RemediationAI
Immediate patching is not available due to vendor non-responsiveness. Organizations using SuperAGI must implement compensating controls: (1) Restrict network access to SuperAGI deployments using firewall rules or reverse proxy authentication to limit exposure to trusted IP ranges or VPN-connected users only - this reduces the remote attack surface but does not eliminate the authorization bypass itself. (2) Implement application-level authorization auditing by monitoring and logging all requests to the three affected endpoints (get_project, update_project, get_projects_organisation) to detect suspicious access patterns such as a single user accessing many project IDs outside their expected usage. (3) Enforce strict role-based access control (RBAC) through a Web Application Firewall (WAF) or API gateway that validates project ownership before allowing the request to reach SuperAGI - this requires custom rules mapping user identities to authorized project IDs. (4) Upgrade to a patched version if the vendor releases one; monitor the VulDB and GitHub repository for security updates. (5) Consider migrating to alternative frameworks if SuperAGI updates are not forthcoming within your organization's risk tolerance window. Each mitigation has trade-offs: network restriction impacts usability and legitimate remote access, WAF rules require manual maintenance as projects are created, and migration carries operational overhead.
A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. Ra
An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. Rated hi
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. Rated high severity
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. Rated medium severi
In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in
Remote unauthenticated access to vector database configurations in TransformerOptimus SuperAGI ≤0.0.14 allows attackers
Path traversal in TransformerOptimus SuperAGI versions up to 0.0.14 allows remote unauthenticated attackers to read, wri
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. Rated high severity (CVSS 7.5), this v
TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attackers to bypass authorization controls
Server-side request forgery (SSRF) in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attac
Authorization bypass in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated attackers to manipulate th
Authorization bypass in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated users to modify arbitrary
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today