# TransformerOptimus SuperAGI.

Every CVE that names TransformerOptimus SuperAGI among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [TransformerOptimus SuperAGI WebScraperTool webpage_extractor.py extract_with_lxml server-side request forgery](https://agentprime.io/advisories/CVE-2026-6616.md)
  `CVE-2026-6616` · CVE record: TransformerOptimus SuperAGI · CVSS 5.3 Medium · Not analysed yet · Published 20 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [TransformerOptimus SuperAGI Multipart Upload resources.py upload path traversal](https://agentprime.io/advisories/CVE-2026-6615.md)
  `CVE-2026-6615` · CVE record: TransformerOptimus SuperAGI · CVSS 6.9 Medium · Not analysed yet · Published 20 Apr 2026 · Tags: Path traversal
- [TransformerOptimus SuperAGI project.py get_projects_organisation authorization](https://agentprime.io/advisories/CVE-2026-6614.md)
  `CVE-2026-6614` · CVE record: TransformerOptimus SuperAGI · CVSS 5.3 Medium · Not analysed yet · Published 20 Apr 2026 · Tags: Broken access control
- [TransformerOptimus SuperAGI agent.py get_schedule_data authorization](https://agentprime.io/advisories/CVE-2026-6613.md)
  `CVE-2026-6613` · CVE record: TransformerOptimus SuperAGI · CVSS 5.3 Medium · Not analysed yet · Published 20 Apr 2026 · Tags: Broken access control
- [TransformerOptimus SuperAGI Agent Execution Endpoint agent_execution.py update_agent_execution authorization](https://agentprime.io/advisories/CVE-2026-6612.md)
  `CVE-2026-6612` · CVE record: TransformerOptimus SuperAGI · CVSS 5.3 Medium · Not analysed yet · Published 20 Apr 2026 · Tags: Broken access control
- [TransformerOptimus SuperAGI Budget Endpoint budget.py update_budget authorization](https://agentprime.io/advisories/CVE-2026-6586.md)
  `CVE-2026-6586` · CVE record: TransformerOptimus SuperAGI · CVSS 5.3 Medium · Not analysed yet · Published 19 Apr 2026 · Tags: Broken access control
- [TransformerOptimus SuperAGI Organisation Update Endpoint organisation.py update_organisation authorization](https://agentprime.io/advisories/CVE-2026-6585.md)
  `CVE-2026-6585` · CVE record: TransformerOptimus SuperAGI · CVSS 5.3 Medium · Not analysed yet · Published 19 Apr 2026 · Tags: Broken access control
- [TransformerOptimus SuperAGI User Update Endpoint user.py update_user authorization](https://agentprime.io/advisories/CVE-2026-6584.md)
  `CVE-2026-6584` · CVE record: TransformerOptimus SuperAGI · CVSS 5.3 Medium · Not analysed yet · Published 19 Apr 2026 · Tags: Broken access control
- [TransformerOptimus SuperAGI API Key Management Endpoint api_key.py edit_api_key authorization](https://agentprime.io/advisories/CVE-2026-6583.md)
  `CVE-2026-6583` · CVE record: TransformerOptimus SuperAGI · CVSS 5.3 Medium · Not analysed yet · Published 19 Apr 2026 · Tags: Broken access control
- [TransformerOptimus SuperAGI Vector Database Management Endpoint vector_dbs.py get_vector_db_details missing authentication](https://agentprime.io/advisories/CVE-2026-6582.md)
  `CVE-2026-6582` · CVE record: TransformerOptimus SuperAGI · CVSS 6.9 Medium · Not analysed yet · Published 19 Apr 2026 · Tags: Authentication bypass
- [TransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversal](https://agentprime.io/advisories/CVE-2025-6280.md)
  `CVE-2025-6280` · CVE record: TransformerOptimus SuperAGI · CVSS 5.1 Medium · Not analysed yet · Published 19 Jun 2025 · Tags: Path traversal
- [IDOR Vulnerability in transformeroptimus/superagi](https://agentprime.io/advisories/CVE-2024-12048.md)
  `CVE-2024-12048` · CVE record: transformeroptimus transformeroptimus/superagi · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: Authentication bypass
- [Unauthenticated Denial of Service in transformeroptimus/superagi](https://agentprime.io/advisories/CVE-2024-9437.md)
  `CVE-2024-9437` · CVE record: transformeroptimus transformeroptimus/superagi · CVSS 7.5 High · Not analysed yet · Published 20 Mar 2025 · Tags: Denial of service
- [Remote Code Execution in transformeroptimus/superagi](https://agentprime.io/advisories/CVE-2024-9439.md)
  `CVE-2024-9439` · CVE record: transformeroptimus transformeroptimus/superagi · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: Code injection
- [Exposure of Sensitive Information in transformeroptimus/superagi](https://agentprime.io/advisories/CVE-2024-9447.md)
  `CVE-2024-9447` · CVE record: transformeroptimus transformeroptimus/superagi · CVSS 6.5 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-1230
- [Improper Privilege Management in transformeroptimus/superagi](https://agentprime.io/advisories/CVE-2024-9431.md)
  `CVE-2024-9431` · CVE record: transformeroptimus transformeroptimus/superagi · CVSS 6.5 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-620
- [Information Disclosure in transformeroptimus/superagi](https://agentprime.io/advisories/CVE-2024-10267.md)
  `CVE-2024-10267` · CVE record: transformeroptimus transformeroptimus/superagi · CVSS 7.5 High · Not analysed yet · Published 20 Mar 2025 · Tags: Information disclosure
- [Insufficiently Protected Credentials in transformeroptimus/superagi](https://agentprime.io/advisories/CVE-2024-9418.md)
  `CVE-2024-9418` · CVE record: transformeroptimus transformeroptimus/superagi · CVSS 6.5 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-256
- [Path Traversal in transformeroptimus/superagi](https://agentprime.io/advisories/CVE-2024-9415.md)
  `CVE-2024-9415` · CVE record: transformeroptimus transformeroptimus/superagi · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: Path traversal

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=transformeroptimus-superagi>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/transformeroptimus-superagi/>. Everything for agents: <https://agentprime.io/llms.txt>.