CVE-2026-51903

SuperAGI v0.0.14 contains an improper access control vulnerability in getagentbylatestexecution in superagi/controllers/agentexecution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for another organization's project through...

CVE-2026-51905

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in getagentexecutionconfiguration in superagi/controllers/agentexecutionconfig.py. A remote authenticated attacker from one organization can read another organization's agent execution configuration by supplying the...

CVE-2026-51902

SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/projectid allows authenticated users from one organization to retrieve the complete list of agents belonging to a different organization's project. The endpoint accepts ...

CVE-2026-51902

SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/projectid allows authenticated users from one organization to retrieve the complete list of agents belonging to a different organization's project. The endpoint accepts ...

CVE-2026-51903

SuperAGI v0.0.14 contains an improper access control vulnerability in getagentbylatestexecution in superagi/controllers/agentexecution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for another organization's project through...

EUVD-2026-113345

SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/projectid allows authenticated users from one organization to retrieve the complete list of agents belonging to a different organization's project. The endpoint accepts ...

SuperAGI security vulnerability

SuperAGI versions v0.0.14 and earlier contain a security vulnerability stemming from improper access control. The /api/agents/get/project/projectid endpoint fails to verify whether the project identified by the projectid parameter belongs to an organization owned by an authenticated user. This fl...

CVE-2026-51903

SuperAGI v0.0.14 is affected by an improper access control vulnerability within the get_agent_by_latest_execution function in superagi/controllers/agent_execution.py. A remote authenticated attacker from one organization can exploit this by supplying a victim project_id to the endpoint /agentexec...

CVE-2026-51905

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in getagentexecutionconfiguration in superagi/controllers/agentexecutionconfig.py. A remote authenticated attacker from one organization can read another organization's agent execution configuration by supplying the...

SuperAGI security vulnerability

SuperAGI version 0.0.14 contains a security vulnerability. This vulnerability stems from improper access control in the getagentbylatestexecution function within superagi/controllers/agentexecution.py. Remote authenticated attackers can exploit this by providing the victim’s projectid to access...

CVE-2026-51902

SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/projectid allows authenticated users from one organization to retrieve the complete list of agents belonging to a different organization's project. The endpoint accepts ...

CVE-2026-51903: n/a: SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in…

SuperAGI v0.0.14 contains an improper access control vulnerability in getagentbylatestexecution in superagi/controllers/agentexecution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for another organization's project through...

CVE-2026-51905

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the get_agent_execution_configuration function located in superagi/controllers/agent_execution_config.py. A remote authenticated attacker from one organization can access and read another organization's agent executi...

PT-2026-132777

SuperAGI v0.0.14 contains an improper access control vulnerability in get agent by latest execution in superagi/controllers/agent execution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for another organization's project through...

CVE-2026-51905

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in getagentexecutionconfiguration in superagi/controllers/agentexecutionconfig.py. A remote authenticated attacker from one organization can read another organization's agent execution configuration by supplying the...

CVE-2026-51902

SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/projectid allows authenticated users from one organization to retrieve the complete list of agents belonging to a different organization's project. The endpoint accepts ...

CVE-2026-51902

SuperAGI versions up to v0.0.14 are vulnerable to an improper access control issue. The agent controller endpoint /api/agents/get/project/{project_id} fails to verify if the requested project_id belongs to the authenticated user's organization. This allows authenticated users to retrieve the comp...

PT-2026-132776

SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/project id allows authenticated users from one organization to retrieve the complete list of agents belonging to a different organization's project. The endpoint accepts...

CVE-2026-51903

SuperAGI v0.0.14 contains an improper access control vulnerability in getagentbylatestexecution in superagi/controllers/agentexecution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for another organization's project through...

PT-2026-132778

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get agent execution configuration in superagi/controllers/agent execution config.py. A remote authenticated attacker from one organization can read another organization's agent execution configuration by supplying th...