EUVD-2026-23803Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
8DescriptionCVE.org
A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects the function extract_with_bs4/extract_with_3k/extract_with_lxml of the file superagi/helper/webpage_extractor.py of the component WebScraperTool. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Server-side request forgery (SSRF) in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attackers to manipulate the WebScraperTool's webpage extraction functions (extract_with_bs4, extract_with_3k, extract_with_lxml) to forge requests to arbitrary servers. The vulnerability has publicly available exploit code and low vendor responsiveness, creating immediate risk for deployments using affected versions.
Technical ContextAI
The vulnerability exists in the webpage extraction functionality of SuperAGI's WebScraperTool component (superagi/helper/webpage_extractor.py). The affected functions utilize libraries such as BeautifulSoup4, lxml, and possibly third-party extraction tools without properly validating or restricting the target URLs passed to them. This is a classic SSRF vulnerability (CWE-918) where user-controlled input to network request functions is not validated against a whitelist or blocked list, allowing attackers to redirect requests to internal resources, cloud metadata endpoints, or external systems. The CVSS vector indicates network accessibility with low attack complexity, but requires authenticated access (PR:L), meaning an attacker must have valid credentials or session access to the SuperAGI application.
RemediationAI
Immediate upgrade to a version of SuperAGI newer than 0.0.14 is the primary remediation, though vendors should verify the specific patched release from TransformerOptimus GitHub or release notes. If an immediate upgrade is not feasible, implement network-level controls by restricting outbound connections from the SuperAGI application to only whitelisted internal domains and services; block access to cloud metadata endpoints (169.254.169.254, 169.254.170.2, etc.) using firewall rules or WAF rules. Additionally, disable or restrict access to the WebScraperTool feature at the application level if it is not actively used, or limit it to trusted users and review all URLs processed by the tool. Apply input validation within the application if source code is available: ensure all URLs passed to extract_with_bs4, extract_with_3k, and extract_with_lxml functions are validated against a whitelist of allowed domains or URL schemes (http/https only, no file://, gopher://, etc.). References for monitoring: check the TransformerOptimus GitHub repository (https://github.com/TransformerOptimus/SuperAGI) for patches and security advisories. Note: Network-level controls reduce but do not eliminate risk if an attacker has application-level access and uses the tool to enumerate internal services.
A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. Ra
An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. Rated hi
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. Rated high severity
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. Rated medium severi
In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in
Remote unauthenticated access to vector database configurations in TransformerOptimus SuperAGI ≤0.0.14 allows attackers
Path traversal in TransformerOptimus SuperAGI versions up to 0.0.14 allows remote unauthenticated attackers to read, wri
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. Rated high severity (CVSS 7.5), this v
TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attackers to bypass authorization controls
Authorization bypass in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated remote attackers to access
Authorization bypass in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated attackers to manipulate th
Authorization bypass in TransformerOptimus SuperAGI up to version 0.0.14 allows authenticated users to modify arbitrary
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today