Threats tagged 'ghsa-6g72-vg82-8fxw'

TransformerOptimus SuperAGI version 0.0.14 has an incorrect access control vulnerability in the get_agent_execution_configuration function. This flaw allows a remote authenticated attacker from one organization to access another organization's agent execution configuration by providing specific agent and execution IDs. The affected endpoint does not verify organization ownership, leading to unauthorized data exposure.