Browse CVEs

MEDIUM 6.5 CVE-2025-51472 Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to execute arbitrary Python code via … Superagi Patch available Fix from $1,6002025-07-22 MEDIUM 5.0 CVE-2025-51475 Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite ar… Superagi Patch available Fix from $1,6002025-07-22 CRITICAL 9.8 CVE-2025-6280 A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function download_attachmen… Superagi after 0.0.14 Fix from $2,3002025-06-19 HIGH 8.8 CVE-2024-9439 SuperAGI is vulnerable to remote code execution in the latest version. The `agent template update` API allows attackers to control certain parameters… Superagi No fix yet Fix from $1,9502025-03-20 MEDIUM 6.5 CVE-2024-9447 An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. The `/get/organisation/` endpoint does not verif… Superagi No fix yet Fix from $1,6002025-03-20 HIGH 8.8 CVE-2024-9415 A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. This vulnerability allows an at… Superagi No fix yet Fix from $1,9502025-03-20 HIGH 8.8 CVE-2024-9431 In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability. After logging into the system, users can … Superagi No fix yet Fix from $1,9502025-03-20 HIGH 7.5 CVE-2024-9437 SuperAGI version v0.0.14 is vulnerable to an unauthenticated Denial of Service (DoS) attack. The vulnerability exists in the resource upload request,… Superagi No fix yet Fix from $1,9502025-03-20 MEDIUM 6.5 CVE-2024-9418 In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in plaintext. This vulnerability… Superagi No fix yet Fix from $1,6002025-03-20 HIGH 8.8 CVE-2024-12048 An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. The application fails to properly che… Superagi No fix yet Fix from $1,9502025-03-20 HIGH 7.5 CVE-2024-10267 An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. An attacker can leak sensitive user information,… Superagi No fix yet Fix from $1,9502025-03-20 HIGH 7.5 CVE-2023-48055 SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. This vulnerability can lead to the disclosure of information and co… Superagi Mitigation only Fix from $1,9502023-11-16