Description
In SuperAGI v0.0.14 and prior, controller endpoints (/api/agents/create, /api/agents/schedule, /api/agents/delete, /api/agents/edit_schedule, /api/agents/stop_schedule) allow authenticated users from one organization to create, schedule, edit, stop, and delete agents belonging to a different organization's project. The endpoints accept a project_id parameter but do not verify that the project belongs to the authenticated user's organization.
Published: 2026-10-02
Score: 4.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized cross‑organization agent management
Action: Apply Fix
AI Analysis

Impact

The vulnerability, a CWE-284 Improper Access Control flaw, allows authenticated users from one organization to create, schedule, edit, stop, and delete agents belonging to a different organization's project because the API endpoints accept a project_id parameter without verifying ownership. This grants those users administrative control over agents in projects they do not own, allowing them to disrupt the other organization’s agent activities.

Affected Systems

All installations of SuperAGI version 0.0.14 and earlier are affected. Any user who authenticates to the service can exploit the flaw if they receive or guess a project_id belonging to another organization within the same SuperAGI instance.

Risk and Exploitability

The flaw is exploitable by authenticating to the web service and sending a request to one of the affected endpoints with a project_id belonging to another organization. No additional privileges or external conditions are required. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The attack surface is limited to the exposed HTTP API. The CVSS score is 4.3.

Generated by OpenCVE AI on October 2, 2026 at 23:26 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update to the latest SuperAGI release (≥ v0.0.15) where the issue has been fixed.
  • If an upgrade is not possible, implement server‑side checks that verify the project_id belongs to the authenticated user’s organization before performing any agent operation.
  • Audit existing projects for unauthorized agent actions and revoke any compromised user accounts if necessary.

Generated by OpenCVE AI on October 2, 2026 at 23:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 02 Oct 2026 23:45:00 +0000

Type Values Removed Values Added
Title Cross‑Organization Agent Manipulation via Unchecked Project ID in SuperAGI

Fri, 02 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 02 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
Title Cross‑Organization Agent Manipulation via Unchecked Project ID in SuperAGI
Weaknesses CWE-284

Fri, 02 Oct 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Transformeroptimus
Transformeroptimus superagi
Vendors & Products Transformeroptimus
Transformeroptimus superagi

Fri, 02 Oct 2026 15:45:00 +0000

Type Values Removed Values Added
Description In SuperAGI v0.0.14 and prior, controller endpoints (/api/agents/create, /api/agents/schedule, /api/agents/delete, /api/agents/edit_schedule, /api/agents/stop_schedule) allow authenticated users from one organization to create, schedule, edit, stop, and delete agents belonging to a different organization's project. The endpoints accept a project_id parameter but do not verify that the project belongs to the authenticated user's organization.
References

Subscriptions

Transformeroptimus Superagi
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-02T20:23:14.738Z

Reserved: 2026-06-08T00:00:00.000Z

Link: CVE-2026-51899

cve-icon Vulnrichment

Updated: 2026-10-02T20:22:20.915Z

cve-icon NVD

Status : Deferred

Published: 2026-10-02T16:16:49.867

Modified: 2026-10-02T21:16:55.260

Link: CVE-2026-51899

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-02T23:30:10Z

Weaknesses