1 matches found
CVE-2025-51475: Improper Limitation of a Pathname to a Restricted Directory
Arbitrary File Overwrite AFO in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload endpoint, due to improper handling of directory traversal in os.path.join and lac...
5CVSS5.9AI score0.00806EPSS
SaveExploits1References1
20