Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-9431 EUVD-2025-6843GHSA-m724-88wc-fpgh

Improper Privilege Management in transformeroptimus/superagi

Published Mar 20, 2025 · Updated Oct 15, 2025 · Assigned by @huntr_ai

Description

In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability. After logging into the system, users can change the passwords of other users, leading to potential account takeover.

Affected products

VendorProductAffectedFixed
transformeroptimus transformeroptimus/superagi unspecified – ≤ latest —

References