What is GHSA-8q94-2856-4jcf?

GHSA-8q94-2856-4jcf is a security advisory published by GitHub Security Advisories with unknown severity. TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent...

Which CVE IDs does GHSA-8q94-2856-4jcf cover?

GHSA-8q94-2856-4jcf covers the following CVE IDs: CVE-2026-51914. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-8q94-2856-4jcfunknown

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent...

Vendor

GitHub Security Advisories

Published

October 2, 2026

Last Modified

October 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-51914 →

📋 Description

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent template controller. In affected source snapshots, save_agent_as_template and publish_template in superagi/controllers/agent_template.py accept caller-supplied agent_id or agent_execution_id values and do not verify that the referenced agent or execution belongs to the authenticated user's organization.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-51914
https://gist.github.com/Ro1ME/bb6fefd4b943400c92c08e0f0644a986
https://github.com/advisories/GHSA-8q94-2856-4jcf