CVE-2026-6613 | TransformerOptimus SuperAGI up to 0.0.14 agent.py delete_agent/stop_schedule/get_schedule_data agent_id authorization

SecurityVulns
Yanac

A vulnerability, which was classified as critical, has been found in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function delete_agent/stop_schedule/get_schedule_data of the file superagi/controllers/agent.py. The manipulation of the argument agent_id leads to authorization bypass.

This vulnerability is uniquely identified as CVE-2026-6613. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More