Technical impact
TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control flaw in its tool controller, where the get_tool and update_tool endpoints accept a caller‑supplied tool_id without verifying that the tool belongs to the caller’s organization. This weakness, identified as CWE‑284, allows an authenticated attacker from one organization to retrieve or alter another organization’s tool metadata through the /tools/get/{tool_id} and /tools/update/{tool_id} API endpoints.
Affected Systems
The affected product is TransformerOptimus SuperAGI version 0.0.14, specifically the controller logic located in superagi/controllers/tool.py. No other vendors or product versions are listed in the current data.
Risk and Exploitability
The flaw is rated critical with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability for the affected organizations. The EPSS score of < 1% suggests a low likelihood of exploitation in the near term, and the vulnerability is not currently catalogued in CISA KEV. Based on the description, the likely attack vector is a remote authenticated HTTPS API request to /tools/get and /tools/update, requiring the attacker to possess a valid tool_id belonging to a different organization.
