Threats tagged 'ghsa-cwmh-qrfg-2hgm'

TransformerOptimus SuperAGI version 0.0.14 contains an incorrect access control vulnerability in its tool controller. The functions get_tool and update_tool do not verify organization ownership of tool IDs, allowing a remote authenticated attacker from one organization to read or modify another organization's tool metadata. This vulnerability has a critical severity with a CVSS score of 9.8.