PT-2026-132777

CVE-2026-51903

·

Published

2026-10-29

·

Updated

2026-10-29

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

SuperAGI v0.0.14 contains an improper access control vulnerability in get agent by latest execution in superagi/controllers/agent execution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for another organization's project through /agentexecutions/get/latest/agent/project/{project id} by supplying a victim project id.
Vendors
Affected products
Related identifiers
CVE-2026-51903
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com