Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/06/23 8:41 a.m.4 views

CVE-2025-6280

A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function downloadattachment of the file SuperAGI/superagi/helper/reademail.py of the component EmailToolKit. The manipulation of the argument filename leads to path traversal...

9.8CVSS7.2AI score0.00631EPSS
Exploits1References1
NVD
NVD
added 2025/06/19 10:15 p.m.4 views

CVE-2025-6280

A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function downloadattachment of the file SuperAGI/superagi/helper/reademail.py of the component EmailToolKit. The manipulation of the argument filename leads to path traversal...

9.8CVSS0.00631EPSS
Exploits1References4
CVE
CVE
added 2025/06/19 9:27 p.m.10 views

CVE-2025-6280

CVE-2025-6280 affects TransformerOptimus SuperAGI up to 0.0.14. The vulnerability resides in EmailToolKit’s read_email.py function download_attachment, where manipulating the filename argument enables path traversal. The exploit has been publicly disclosed. Practical impact is exposure to arbitra...

9.8CVSS5.5AI score0.00631EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/06/19 9:27 p.m.10 views

CVE-2025-6280 TransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversal

A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function downloadattachment of the file SuperAGI/superagi/helper/reademail.py of the component EmailToolKit. The manipulation of the argument filename leads to path traversal...

5.5CVSS0.00631EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/06/19 9:27 p.m.3 views

CVE-2025-6280 TransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversal

A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function downloadattachment of the file SuperAGI/superagi/helper/reademail.py of the component EmailToolKit. The manipulation of the argument filename leads to path traversal...

5.5CVSS7.1AI score0.00631EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/06/19 12:0 a.m.2 views

PT-2025-26244 · Unknown · Emailtoolkit +1

Name of the Vulnerable Software and Affected Versions: TransformerOptimus SuperAGI versions up to 0.0.14 Description: A critical issue was found in the EmailToolKit component, specifically in the download attachment function of the file SuperAGI/superagi/helper/read email.py. The manipulation of...

9.8CVSS5.4AI score0.00631EPSS
Exploits1References11
Rows per page
Query Builder