Threats tagged 'ghsa-8q94-2856-4jcf'

TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in its agent template controller. The functions save_agent_as_template and publish_template accept user-supplied agent_id or agent_execution_id parameters without verifying that these belong to the authenticated user's organization. This flaw allows unauthorized users with limited privileges to access or manipulate agent templates outside their organization.