CVE-2026-51904 | SuperAGI up to 0.0.14 Agent Execution Controller agent_execution.py create_agent_execution/create_agent_run agent_id access control

October 2, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in SuperAGI up to 0.0.14. This vulnerability affects the function create_agent_execution/create_agent_run of the file superagi/controllers/agent_execution.py of the component Agent Execution Controller. The manipulation of the argument agent_id leads to improper access controls.

This vulnerability is documented as CVE-2026-51904. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More