CVE-2026-6582: TransformerOptimus SuperAGI Vector Database Management Endpoint vector_dbs.py get_vector_db_details missing authentication
A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function getvectordbdetails of the file superagi/controllers/vectordbs.py of the component Vector Database Management Endpoint. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6582?
CVE-2026-6582 is classified as a high severity vulnerability due to missing authentication in the get_vector_db_details function.
How do I fix CVE-2026-6582?
To fix CVE-2026-6582, update TransformerOptimus SuperAGI to version 0.0.15 or later.
What software is affected by CVE-2026-6582?
CVE-2026-6582 affects TransformerOptimus SuperAGI versions up to and including 0.0.14.
What are the risks associated with CVE-2026-6582?
The risks associated with CVE-2026-6582 include unauthorized access to sensitive information due to the lack of authentication.
Where is CVE-2026-6582 located in the codebase?
CVE-2026-6582 is found in the get_vector_db_details function of the file superagi/controllers/vector_dbs.py.