Advisories · Technology
TransformerOptimus SuperAGI.
Every CVE that names TransformerOptimus SuperAGI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
TransformerOptimus SuperAGI WebScraperTool webpage_extractor.py extract_with_lxml server-side request forgery
- TransformerOptimus SuperAGI
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
TransformerOptimus SuperAGI Multipart Upload resources.py upload path traversal
- TransformerOptimus SuperAGI
- Path traversal
- CVSS 5.3 Medium
TransformerOptimus SuperAGI project.py get_projects_organisation authorization
- TransformerOptimus SuperAGI
- Broken access control
- CVSS 5.3 Medium
TransformerOptimus SuperAGI agent.py get_schedule_data authorization
- TransformerOptimus SuperAGI
- Broken access control
- CVSS 5.3 Medium
TransformerOptimus SuperAGI Agent Execution Endpoint agent_execution.py update_agent_execution authorization
- TransformerOptimus SuperAGI
- Broken access control
- CVSS 5.3 Medium
TransformerOptimus SuperAGI Budget Endpoint budget.py update_budget authorization
- TransformerOptimus SuperAGI
- Broken access control
- CVSS 5.3 Medium
TransformerOptimus SuperAGI Organisation Update Endpoint organisation.py update_organisation authorization
- TransformerOptimus SuperAGI
- Broken access control
- CVSS 5.3 Medium
TransformerOptimus SuperAGI User Update Endpoint user.py update_user authorization
- TransformerOptimus SuperAGI
- Broken access control
- CVSS 5.3 Medium
TransformerOptimus SuperAGI API Key Management Endpoint api_key.py edit_api_key authorization
- TransformerOptimus SuperAGI
- Broken access control
- CVSS 6.9 Medium
TransformerOptimus SuperAGI Vector Database Management Endpoint vector_dbs.py get_vector_db_details missing authentication
- TransformerOptimus SuperAGI
- Authentication bypass
- CVSS 5.1 Medium
TransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversal
- TransformerOptimus SuperAGI
- Path traversal
- CVSS 8.8 High
IDOR Vulnerability in transformeroptimus/superagi
- transformeroptimus/superagi
- Authentication bypass
- CVSS 7.5 High
Unauthenticated Denial of Service in transformeroptimus/superagi
- transformeroptimus/superagi
- Denial of service
- CVSS 8.8 High
Remote Code Execution in transformeroptimus/superagi
- transformeroptimus/superagi
- Code injection
- CVSS 6.5 Medium
Exposure of Sensitive Information in transformeroptimus/superagi
- transformeroptimus/superagi
- CWE-1230
- CVSS 6.5 Medium
Improper Privilege Management in transformeroptimus/superagi
- transformeroptimus/superagi
- CWE-620
- CVSS 7.5 High
Information Disclosure in transformeroptimus/superagi
- transformeroptimus/superagi
- Information disclosure
- CVSS 6.5 Medium
Insufficiently Protected Credentials in transformeroptimus/superagi
- transformeroptimus/superagi
- CWE-256
- CVSS 8.8 High
Path Traversal in transformeroptimus/superagi
- transformeroptimus/superagi
- Path traversal