TI-2024-11179 CVE-2024-12048 · GHSA-m74w-gj86-32q9
IDOR Vulnerability in transformeroptimus/superagi
Priority HIGH 73
An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14.
TransformerOptimus
Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
TransformerOptimus records in CISA KEVNo TransformerOptimus vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records in Superagi · all components
TI-2024-08758 CVE-2024-9439 · GHSA-mq78-p977-pwgv
Remote Code Execution in transformeroptimus/superagi
Priority HIGH 73
SuperAGI is vulnerable to remote code execution in the latest version.
TI-2024-08736 CVE-2024-9415 · GHSA-959v-wfjp-7c37
Path Traversal in transformeroptimus/superagi
Priority HIGH 73
A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14.
TI-2024-09513 CVE-2024-10267 · GHSA-8qff-6gwc-wph3
Information Disclosure in transformeroptimus/superagi
Priority HIGH 72
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi.
TI-2024-08756 CVE-2024-9437 · GHSA-cx66-wgv6-fpfh
Unauthenticated Denial of Service in transformeroptimus/superagi
Priority HIGH 72
SuperAGI version v0.0.14 is vulnerable to an unauthenticated Denial of Service (DoS) attack.
TI-2024-08751 CVE-2024-9431 · GHSA-m724-88wc-fpgh
Improper Privilege Management in transformeroptimus/superagi
Priority HIGH 71
In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability.
TI-2025-32338 CVE-2025-51472 · GHSA-72jx-rhg9-xgfw
Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14…
Priority MEDIUM 64
Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to execute arbitrary Python code via malicious values in agent template configurations such as the goal, con…
TI-2024-08766 CVE-2024-9447 · GHSA-f2v6-7vxr-j9g8
Exposure of Sensitive Information in transformeroptimus/superagi
Priority MEDIUM 62
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi.
TI-2024-08739 CVE-2024-9418 · GHSA-h4x7-365q-3rm3
Insufficiently Protected Credentials in transformeroptimus/superagi
Priority MEDIUM 62
In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in plaintext.
TI-2025-32339 CVE-2025-51475 · GHSA-7h3r-f4vp-3r8f
Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in…
Priority MEDIUM 56
Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload en…
TI-2025-05682 CVE-2025-6280 · GHSA-m6ff-6r9h-77px
TransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversal
Priority MEDIUM 56
A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14.
TI-2023-26018 CVE-2023-48055 · GHSA-w83r-m795-q26w
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations.
Priority LOW 39
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations.