What is GHSA-hj56-jwmr-p6ww?

GHSA-hj56-jwmr-p6ww is a security advisory published by GitHub Security Advisories with High severity. TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in...

Which CVE IDs does GHSA-hj56-jwmr-p6ww cover?

GHSA-hj56-jwmr-p6ww covers the following CVE IDs: CVE-2026-51916. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hj56-jwmr-p6ww?

GHSA-hj56-jwmr-p6ww has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-hj56-jwmr-p6wwHighCVSS 7.5

TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in...

Vendor

GitHub Security Advisories

Published

October 2, 2026

Last Modified

October 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-51916 →

📋 Description

TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_user_knowledge in superagi/controllers/knowledges.py. In affected source snapshots, POST /knowledges/delete/{knowledge_id} deletes the selected knowledge object without requiring authentication in the route and without verifying organization ownership of the supplied knowledge_id.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-51916
https://gist.github.com/Ro1ME/b2e83acef8d5743023ffedd806bb7a08
https://github.com/advisories/GHSA-hj56-jwmr-p6ww