TI-2024-11179 CVE-2024-12048 · GHSA-m74w-gj86-32q9
IDOR Vulnerability in transformeroptimus/superagi
Priority HIGH 73
An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14.
TransformerOptimus
Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
TransformerOptimus records in CISA KEVNo TransformerOptimus vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
22 records
TI-2024-08758 CVE-2024-9439 · GHSA-mq78-p977-pwgv
Remote Code Execution in transformeroptimus/superagi
Priority HIGH 73
SuperAGI is vulnerable to remote code execution in the latest version.
TI-2024-08736 CVE-2024-9415 · GHSA-959v-wfjp-7c37
Path Traversal in transformeroptimus/superagi
Priority HIGH 73
A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14.
TI-2024-09513 CVE-2024-10267 · GHSA-8qff-6gwc-wph3
Information Disclosure in transformeroptimus/superagi
Priority HIGH 72
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi.
TI-2024-08756 CVE-2024-9437 · GHSA-cx66-wgv6-fpfh
Unauthenticated Denial of Service in transformeroptimus/superagi
Priority HIGH 72
SuperAGI version v0.0.14 is vulnerable to an unauthenticated Denial of Service (DoS) attack.
TI-2024-08751 CVE-2024-9431 · GHSA-m724-88wc-fpgh
Improper Privilege Management in transformeroptimus/superagi
Priority HIGH 71
In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability.
TI-2026-05802 CVE-2026-6615 · GHSA-5qr4-57wv-4r2w
TransformerOptimus SuperAGI Multipart Upload resources.py upload path traversal
Priority HIGH 70
A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14.
TI-2026-05769 CVE-2026-6582 · GHSA-42gh-h7rj-5v3m
Improper authentication in TransformerOptimus SuperAGI
Priority HIGH 70
A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14.
TI-2025-32338 CVE-2025-51472 · GHSA-72jx-rhg9-xgfw
Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14…
Priority MEDIUM 64
Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to execute arbitrary Python code via malicious values in agent template configurations such as the goal, con…
TI-2024-08766 CVE-2024-9447 · GHSA-f2v6-7vxr-j9g8
Exposure of Sensitive Information in transformeroptimus/superagi
Priority MEDIUM 62
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi.
TI-2024-08739 CVE-2024-9418 · GHSA-h4x7-365q-3rm3
Insufficiently Protected Credentials in transformeroptimus/superagi
Priority MEDIUM 62
In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in plaintext.
TI-2026-05803 CVE-2026-6616 · GHSA-7gm3-fv82-7h98
TransformerOptimus SuperAGI WebScraperTool webpage_extractor.py extract_with_lxml server-side request forgery
Priority MEDIUM 57
A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14.
TI-2026-05801 CVE-2026-6614 · GHSA-2chg-78hj-c2w2
TransformerOptimus SuperAGI project.py get_projects_organisation authorization
Priority MEDIUM 57
A security flaw has been discovered in TransformerOptimus SuperAGI up to 0.0.14.
TI-2026-05800 CVE-2026-6613 · GHSA-pg76-qgmq-mvpq
TransformerOptimus SuperAGI agent.py get_schedule_data authorization
Priority MEDIUM 57
A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14.
TI-2026-05799 CVE-2026-6612 · GHSA-6fpm-qhmq-mwq8
TransformerOptimus SuperAGI Agent Execution Endpoint agent_execution.py update_agent_execution authorization
Priority MEDIUM 57
A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14.
TI-2026-05773 CVE-2026-6586 · GHSA-f8vm-5j5r-ppjw
TransformerOptimus SuperAGI Budget Endpoint budget.py update_budget authorization
Priority MEDIUM 57
A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14.
TI-2026-05772 CVE-2026-6585 · GHSA-p2p9-2gw5-hphv
TransformerOptimus SuperAGI Organisation Update Endpoint organisation.py update_organisation authorization
Priority MEDIUM 57
A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14.
TI-2026-05771 CVE-2026-6584 · GHSA-pw7f-f7wc-gxxw
TransformerOptimus SuperAGI User Update Endpoint user.py update_user authorization
Priority MEDIUM 57
A vulnerability was found in TransformerOptimus SuperAGI up to 0.0.14.
TI-2026-05770 CVE-2026-6583 · GHSA-fqhh-6rmf-f4vh
TransformerOptimus SuperAGI API Key Management Endpoint api_key.py edit_api_key authorization
Priority MEDIUM 57
A vulnerability has been found in TransformerOptimus SuperAGI up to 0.0.14.
TI-2025-32339 CVE-2025-51475 · GHSA-7h3r-f4vp-3r8f
Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in…
Priority MEDIUM 56
Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload en…
TI-2025-05682 CVE-2025-6280 · GHSA-m6ff-6r9h-77px
TransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversal
Priority MEDIUM 56
A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14.
TI-2023-26018 CVE-2023-48055 · GHSA-w83r-m795-q26w
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations.
Priority LOW 39
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations.