SuperAGI version 0.0.14 has an improper access control vulnerability in the get_agent_by_latest_execution function. This flaw allows a remote authenticated attacker from one organization to access the latest execution and agent metadata of another organization's project by providing the victim's project ID via a specific API endpoint.