TransformerOptimus SuperAGI

• CVE-2026-6616 Medium 6.3 TransformerOptimus SuperAGI WebScraperTool webpage_extractor.py extract_with_lxml server-side request forgery 0.2%
• CVE-2026-6615 High 7.3 TransformerOptimus SuperAGI Multipart Upload resources.py upload path traversal 0.5%
• CVE-2026-6614 Medium 6.3 TransformerOptimus SuperAGI project.py get_projects_organisation authorization 0.2%
• CVE-2026-6613 Medium 6.3 TransformerOptimus SuperAGI agent.py get_schedule_data authorization 0.2%
• CVE-2026-6612 Medium 6.3 TransformerOptimus SuperAGI Agent Execution Endpoint agent_execution.py update_agent_execution authorization 0.3%
• CVE-2026-6586 Medium 6.3 TransformerOptimus SuperAGI Budget Endpoint budget.py update_budget authorization 0.3%
• CVE-2026-6585 Medium 5.4 TransformerOptimus SuperAGI Organisation Update Endpoint organisation.py update_organisation authorization 0.3%
• CVE-2026-6584 Medium 5.4 TransformerOptimus SuperAGI User Update Endpoint user.py update_user authorization 0.3%
• CVE-2026-6583 Medium 5.4 TransformerOptimus SuperAGI API Key Management Endpoint api_key.py edit_api_key authorization 0.3%
• CVE-2026-6582 High 7.3 TransformerOptimus SuperAGI Vector Database Management Endpoint vector_dbs.py get_vector_db_details missing authentication 0.4%
• CVE-2025-6280 Medium 5.5 TransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversal 0.6%