CVE-2026-51899: Medium severity superagi SuperAGI vulnerability

Q: Who can exploit this issue?

An authenticated SuperAGI user in one organization can exploit it against agents in a project owned by a different organization. No user interaction is required.

Q: What access does an attacker need?

The attacker needs valid authenticated access to SuperAGI and a target project_id belonging to another organization. The affected controller endpoints do not verify that the supplied project belongs to the attacker’s organization.

Q: Which agent actions can be performed across organization boundaries?

An attacker can create and schedule agents, edit or stop schedules, and delete agents through the affected endpoints. The impact is unauthorized modification of another organization’s agent resources.

Q: How can I determine whether an instance is affected?

SuperAGI version 0.0.14 and prior are affected according to the available information. Instances should also review whether the listed controller endpoints authorize project_id values against the authenticated user’s organization.

Published Oct 2, 2026

Updated

In SuperAGI v0.0.14 and prior, controller endpoints (/api/agents/create, /api/agents/schedule, /api/agents/delete, /api/agents/editschedule, /api/agents/stopschedule) allow authenticated users from one organization to create, schedule, edit, stop, and delete agents belonging to a different organization's project. The endpoints accept a projectid parameter but do not verify that the project belongs to the authenticated user's organization.

Affected Software

1 affected component

superagi SuperAGI<=0.0.14

Event History

Oct 2, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An authenticated SuperAGI user in one organization can exploit it against agents in a project owned by a different organization. No user interaction is required.

What access does an attacker need?

The attacker needs valid authenticated access to SuperAGI and a target project_id belonging to another organization. The affected controller endpoints do not verify that the supplied project belongs to the attacker’s organization.

Which agent actions can be performed across organization boundaries?

An attacker can create and schedule agents, edit or stop schedules, and delete agents through the affected endpoints. The impact is unauthorized modification of another organization’s agent resources.

How can I determine whether an instance is affected?

SuperAGI version 0.0.14 and prior are affected according to the available information. Instances should also review whether the listed controller endpoints authorize project_id values against the authenticated user’s organization.

CVE-2026-51899: Medium severity superagi SuperAGI vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What access does an attacker need?

Which agent actions can be performed across organization boundaries?

How can I determine whether an instance is affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What access does an attacker need?

Which agent actions can be performed across organization boundaries?

How can I determine whether an instance is affected?