Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Superagi MEDIUM 6.5
CVE-2025-51472

Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to execute arbitrary Python code via …

Patch available
Fix from $1,600 2025-07-22
Superagi MEDIUM 5.0
CVE-2025-51475

Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite ar…

Patch available
Fix from $1,600 2025-07-22
Superagi CRITICAL 9.8
CVE-2025-6280

A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function download_attachmen…

Fix: after 0.0.14
Fix from $2,300 2025-06-19
Superagi HIGH 8.8
CVE-2024-9439

SuperAGI is vulnerable to remote code execution in the latest version. The `agent template update` API allows attackers to control certain parameters…

No fix yet
Fix from $1,950 2025-03-20
Superagi MEDIUM 6.5
CVE-2024-9447

An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. The `/get/organisation/` endpoint does not verif…

No fix yet
Fix from $1,600 2025-03-20
Superagi HIGH 8.8
CVE-2024-9415

A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. This vulnerability allows an at…

No fix yet
Fix from $1,950 2025-03-20
Superagi HIGH 8.8
CVE-2024-9431

In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability. After logging into the system, users can …

No fix yet
Fix from $1,950 2025-03-20
Superagi HIGH 7.5
CVE-2024-9437

SuperAGI version v0.0.14 is vulnerable to an unauthenticated Denial of Service (DoS) attack. The vulnerability exists in the resource upload request,…

No fix yet
Fix from $1,950 2025-03-20
Superagi MEDIUM 6.5
CVE-2024-9418

In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in plaintext. This vulnerability…

No fix yet
Fix from $1,600 2025-03-20
Superagi HIGH 8.8
CVE-2024-12048

An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. The application fails to properly che…

No fix yet
Fix from $1,950 2025-03-20
Superagi HIGH 7.5
CVE-2024-10267

An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. An attacker can leak sensitive user information,…

No fix yet
Fix from $1,950 2025-03-20
Superagi HIGH 7.5
CVE-2023-48055

SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. This vulnerability can lead to the disclosure of information and co…

Mitigation only
Fix from $1,950 2023-11-16