CVE-2026-51902
CVE-2026-51902
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/{project_id} allows authenticated users from one organization to retrieve the complete list of agents belonging to a different organization's project. The endpoint accepts a project_id parameter but does not verify that the project belongs to the authenticated user's organization.
EPSS 0,1%
- Publication
- Mise à jour
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié