CVE-2026-51899 | TransformerOptimus SuperAGI up to 0.0.14 Controller /api/agents/create project_id privileges management

October 2, 2026 Yanac

A vulnerability was found in TransformerOptimus SuperAGI up to 0.0.14. It has been declared as critical. This affects an unknown function of the file /api/agents/create of the component Controller. Executing a manipulation of the argument project_id can lead to improper privilege management.

This vulnerability is handled as CVE-2026-51899. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More