EUVD-2026-23791Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
8DescriptionCVE.org
A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function delete_agent/stop_schedule/get_schedule_data of the file superagi/controllers/agent.py. The manipulation of the argument agent_id leads to authorization bypass. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Authorization bypass in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated attackers to manipulate the agent_id parameter in delete_agent, stop_schedule, and get_schedule_data endpoints, bypassing access controls to perform unauthorized operations on agents and schedules. The vulnerability is remotely exploitable by any authenticated user and publicly available exploit code exists; however, the vendor has not responded to early disclosure attempts.
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated user session (PR:L from CVSS vector) - the attacker must have valid login credentials to SuperAGI. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | While the CVSS score of 5.3 is moderate, the real-world risk is elevated by several factors: (1) exploitation requires authentication (PR:L), reducing the threat surface to users with valid accounts - either legitimate users acting maliciously or attackers who have obtained credentials; (2) publicly available exploit code (POC) lowers the barrier to exploitation; (3) the vulnerability affects core agent management functions (delete, schedule control), creating operational impact; (4) the vendor's non-response to early disclosure suggests no timeline for a fix. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An authenticated user of SuperAGI (either a legitimate user or an attacker with stolen credentials) identifies another user's agent_id through enumeration or log analysis, then crafts HTTP requests to the delete_agent, stop_schedule, or get_schedule_data endpoints with the victim's agent_id parameter. The endpoint processes the request without validating that the requestor owns the agent, allowing unauthorized deletion or control of the victim's agents and schedules. … |
| Remediation | No vendor-released patch has been identified at time of analysis, given the vendor's non-response to disclosure. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today