CVE-2026-51904 describes an improper access control vulnerability in SuperAGI up to version 0.0.14. The vulnerability exists in the agent execution controller, specifically in the create_agent_execution and create_agent_run functions within superagi/controllers/agent_execution.py. These functions accept a caller-supplied agent_id but fail to verify ownership of the agent relative to the authenticated user's organization. Consequently, an authenticated attacker can create or start execution records for agents belonging to other organizations by accessing the endpoints /agentexecutions/add or /agentexecutions/add_run.

An authenticated attacker from one organization can manipulate agent execution records of agents owned by other organizations. This could lead to unauthorized creation or initiation of agent executions across organizational boundaries, potentially causing data integrity issues or unauthorized actions within the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected endpoints to trusted users only and monitor for suspicious activity related to agent execution creation and runs. Implement additional access control checks to verify agent ownership before allowing execution creation or start.