CVE-2026-51905: Security vulnerability

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in getagentexecutionconfiguration in superagi/controllers/agentexecutionconfig.py. A remote authenticated attacker from one organization can read another organization's agent execution configuration by supplying the victim agentid and agentexecutionid to /agentexecutionsconfigs/details/agentid/{agentid}/agentexecutionid/{agentexecutionid}. The endpoint lacks an organization ownership check on the selected agent and execution.