CVE-2026-51904

SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected source snapshots, createagentexecution and createagentrun in superagi/controllers/agentexecution.py accept a caller-supplied agentid and fail to verify that the referenced agent...

CVE-2026-51904

SuperAGI versions up to v0.0.14 are vulnerable to an improper access control vulnerability in the agent execution controller. Specifically, the create_agent_execution and create_agent_run functions in superagi/controllers/agent_execution.py accept a caller-supplied agent_id but fail to verify if ...

EUVD-2026-91702

SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected source snapshots, createagentexecution and createagentrun in superagi/controllers/agentexecution.py accept a caller-supplied agentid and fail to verify that the referenced agent...