Priority MEDIUM 57
A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00219 · Published 2026-04-20 · No fix listed CWE-918
Priority HIGH 70
A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00502 · Published 2026-04-20 · No fix listed CWE-22
Priority MEDIUM 57
A security flaw has been discovered in TransformerOptimus SuperAGI up to 0.0.14.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00216 · Published 2026-04-20 · No fix listed CWE-285
Priority MEDIUM 57
A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00216 · Published 2026-04-20 · No fix listed CWE-285
Priority MEDIUM 57
A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00314 · Published 2026-04-20 · No fix listed CWE-285
Priority MEDIUM 57
A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0027 · Published 2026-04-19 · No fix listed CWE-285
Priority MEDIUM 57
A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.003 · Published 2026-04-19 · No fix listed CWE-285
Priority MEDIUM 57
A vulnerability was found in TransformerOptimus SuperAGI up to 0.0.14.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.003 · Published 2026-04-19 · No fix listed CWE-285
Priority MEDIUM 57
A vulnerability has been found in TransformerOptimus SuperAGI up to 0.0.14.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.003 · Published 2026-04-19 · No fix listed CWE-285
Priority HIGH 70
A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00391 · Published 2026-04-19 · No fix listed CWE-287
Priority MEDIUM 56
Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload en…
CVSS 3.1MEDIUM 5.0· Local · Low privileges · User interaction · EPSS 0.00801 · Published 2025-07-22 · No fix listed CWE-22
Priority MEDIUM 64
Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to execute arbitrary Python code via malicious values in agent template configurations such as the goal, con…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00464 · Published 2025-07-22 · No fix listed CWE-77
Priority MEDIUM 56
A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14.
CVSS 4.0MEDIUM 5.1· Adjacent network · Low privileges · No interaction · EPSS 0.00625 · Published 2025-06-19 · No fix listed CWE-22
Priority HIGH 73
An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00742 · Published 2025-03-20 · No fix listed CWE-304
Priority HIGH 72
SuperAGI version v0.0.14 is vulnerable to an unauthenticated Denial of Service (DoS) attack.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00828 · Published 2025-03-20 · No fix listed CWE-770
Priority HIGH 73
SuperAGI is vulnerable to remote code execution in the latest version.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01224 · Published 2025-03-20 · No fix listed CWE-94
Priority MEDIUM 62
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00614 · Published 2025-03-20 · No fix listed CWE-1230
Priority HIGH 71
In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00631 · Published 2025-03-20 · No fix listed CWE-620
Priority HIGH 72
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00628 · Published 2025-03-20 · No fix listed CWE-359
Priority MEDIUM 62
In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in plaintext.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00608 · Published 2025-03-20 · No fix listed CWE-256
Priority HIGH 73
A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0149 · Published 2025-03-20 · No fix listed CWE-22
Priority LOW 39
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00371 · Published 2023-11-16 · No fix listed CWE-798
THREATIST.IORead the docs