PatchTheCVEsuperagi vulnerabilities and fixes
Recent CVEs affecting superagi, with upgrade or downgrade steps. 10 tracked.
superagi has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-07-22. Highest priority: CVE-2024-9415 (score 54/100).
- CVE-2025-51475 MEDIUM 5.0 DOWNGRADE Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14
- CVE-2025-51472 MEDIUM 6.5 DOWNGRADE Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14 allows remote attacker
- CVE-2024-9447 MEDIUM 6.5 DOWNGRADE An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi
- CVE-2024-9439 HIGH 8.8 DOWNGRADE SuperAGI is vulnerable to remote code execution in the latest version
- CVE-2024-9437 HIGH 7.5 DOWNGRADE SuperAGI version v0.0.14 is vulnerable to an unauthenticated Denial of Service (DoS) attack
- CVE-2024-9431 HIGH 8.8 DOWNGRADE In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability
- CVE-2024-9418 MEDIUM 6.5 DOWNGRADE In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's pa
- CVE-2024-9415 HIGH 8.8 DOWNGRADE A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version
- CVE-2024-12048 HIGH 8.8 DOWNGRADE An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14
- CVE-2024-10267 HIGH 7.5 DOWNGRADE An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi
FAQ
How do I fix superagi vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is superagi being exploited right now?
None of the tracked superagi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which superagi CVE should I patch first?
CVE-2024-9415 currently ranks highest (54/100): A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version .