SuperAGI access control flaw exposes other organizations' agent lists
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-284.
Summary
SuperAGI up to v0.0.14 contains an improper access control flaw (CWE-284) in the agent controller endpoint /api/agents/get/project/{project_id}. An authenticated user of one organization can retrieve the complete list of agents belonging to another organization's project because the endpoint does not verify that the project belongs to the user's organization. The attack needs only a low-privilege account and exposes data with high confidentiality impact.
Written with Claude Haiku 5.5 from the sources below · 2026-11-02
Description from the CNA
SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/{project_id} allows authenticated users from one organization to retrieve the complete list of agents belonging to a different organization's project. The endpoint accepts a project_id parameter but does not verify that the project belongs to the authenticated user's organization.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
Remediation
The sources list no fixed version for SuperAGI.
Written with Claude Haiku 5.5 from the sources below · 2026-11-02
Timeline
- 2026-10-29 Threatist record created from CVE-2026-51902
- 2026-10-29 Alias added: GHSA-j9vc-8hj2-57qw
- 2026-11-02 CVSS score added · CISA ADP
- 2026-11-02 Weakness changed · CISA ADP
- 2026-11-02 CISA SSVC decision points changed
- 2026-11-02 Priority changed: LOW → MEDIUM
References
Sources
- CVE-2026-51902 · CVE Program
- CVE-2026-51902 · NVD
- FIRST EPSS
- GHSA-j9vc-8hj2-57qw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences