PT-2026-104370 · Undefined · Undefined
CVE-2026-51915
·
Published
2026-10-02
·
Updated
2026-10-02
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the tool controller. In affected source snapshots, get tool and update tool in superagi/controllers/tool.py accept a caller-supplied tool id and fail to verify organization ownership through the associated toolkit. A remote authenticated attacker from one organization can read or modify another organization's tool metadata through /tools/get/{tool id} and /tools/update/{tool id}.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined