CVE-2026-6613
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14 affecting the delete_agent/stop_schedule/get_schedule_data functions in superagi/controllers/agent.py. Manipulation of the agent_id argument leads to authorization bypass. The attack can be carried out remotely and the exploit is publicly available.
Risk Assessment
Authorization bypass may allow an attacker to delete agents or manipulate schedules without proper permissions. The public exploit increases the risk of exploitation.
Recommendation
Update SuperAGI to a version later than 0.0.14 or implement permission verification for agent operations. Restrict access to the administrative interface.
Other vulnerabilities in SuperAGI
See all- CVE-2026-51915Critical
TransformerOptimus SuperAGI v0.0.14 is vulnerable to incorrect access control in the tool controller. In affected source snapshots, get_tool and update_tool in superagi/controllers/tool.py accept a caller-supplied tool_id and fail to verify organization ownership through the associated toolkit. A remote authenticated attacker from one organization can read or modify another organization's tool metadata through /tools/get/{tool_id} and /tools/update/{tool_id}.
- CVE-2026-51904Critical
SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected source snapshots, create_agent_execution and create_agent_run in superagi/controllers/agent_execution.py accept a caller-supplied agent_id and fail to verify that the referenced agent belongs to the authenticated user's organization. A remote authenticated attacker from one organization can create or start execution records for agents owned by another organization through /agentexecutions/add or /agentexecutions/add_run.
- CVE-2026-51903Low risk· EPSS 17%
SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllers/agent_execution.py. A remote authenticated attacker from one organization can retrieve the latest execution and agent metadata for another organization's project through /agentexecutions/get/latest/agent/project/{project_id} by supplying a victim project_id.
- CVE-2026-51902Medium
SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/{project_id} allows authenticated users from one organization to retrieve the complete list of agents belonging to a different organization's project. The endpoint accepts a project_id parameter but does not verify that the project belongs to the authenticated user's organization.
- CVE-2026-51916High
TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_user_knowledge in superagi/controllers/knowledges.py. In affected source snapshots, POST /knowledges/delete/{knowledge_id} deletes the selected knowledge object without requiring authentication in the route and without verifying organization ownership of the supplied knowledge_id.
- CVE-2026-51914High
TransformerOptimus SuperAGI v0.0.14 is vulnerable to incorrect access control in the agent template controller. In affected source snapshots, save_agent_as_template and publish_template in superagi/controllers/agent_template.py accept caller-supplied agent_id or agent_execution_id values and do not verify that the referenced agent or execution belongs to the authenticated user's organization.
- CVE-2026-51901High
SuperAGI up to 0.0.14 is vulnerable to Incorrect Access Control. The agent execution controller endpoint /api/agentexecutions/schedule allows authenticated users from one organization to schedule existing agents belonging to a different organization without proper authorization checks. The endpoint accepts an agent_id parameter but does not verify that the agent belongs to the authenticated user's organization.
- CVE-2026-51899Medium
In SuperAGI v0.0.14 and prior, controller endpoints (/api/agents/create, /api/agents/schedule, /api/agents/delete, /api/agents/edit_schedule, /api/agents/stop_schedule) allow authenticated users from one organization to create, schedule, edit, stop, and delete agents belonging to a different organization's project. The endpoints accept a project_id parameter but do not verify that the project belongs to the authenticated user's organization.
- CVE-2026-6616Medium
A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14 affecting the extract_with_bs4/extract_with_3k/extract_with_lxml functions in superagi/helper/webpage_extractor.py of the WebScraperTool component. Manipulation leads to server-side request forgery. The exploit has been publicly disclosed and can be launched remotely.
- CVE-2026-6614Medium
A security flaw has been discovered in TransformerOptimus SuperAGI up to 0.0.14 affecting the get_project/update_project/get_projects_organisation functions in superagi/controllers/project.py. Manipulation results in authorization bypass. The attack can be performed remotely and the exploit has been released publicly.
Original NVD description (English source)
A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function delete_agent/stop_schedule/get_schedule_data of the file superagi/controllers/agent.py. The manipulation of the argument agent_id leads to authorization bypass. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS