---
id: "CVE-2026-51905"
kind: "vulnerability"
aliases: ["CVE-2026-51905"]
title: "SuperAGI: agent execution configs readable across organizations by ID"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "SuperAGI", "fixed": [], "affected": "<= 0.0.14", "ecosystem": "github"}]
ecosystems: []
tags: ["ai-agents", "ai-tooling", "multi-tenant", "self-hosted", "superagi"]
not_affected_if: ["auth-required", "single-organization"]
published_at: "2026-10-29T18:17:32+00:00"
first_seen_at: "2026-10-29T18:26:34+00:00"
updated_at: "2026-10-29T18:29:55+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-51905", "first_seen_at": "2026-10-29T18:26:34+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-29T18:29:55+00:00"}]
---

# SuperAGI: agent execution configs readable across organizations by ID

SuperAGI v0.0.14 has an endpoint that returns an agent's execution configuration when given an agent ID and execution ID, without checking that the requester belongs to the owning organization. A logged-in user from one organization can read another organization's agent execution configuration.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- github:SuperAGI affected <= 0.0.14 fixed ?

## How to check

Run SuperAGI 0.0.14 or earlier? Check superagi/controllers/agent_execution_config.py (line ~24) for an organization ownership check in get_agent_execution_configuration. Test: as a user in org B, GET /api/agent_executions_configs/details/agent_id/{id}/agent_execution_id/{id} with IDs from org A; a 200 with data means exposed.

## Fix

No fixed release known: v0.0.14 is the latest GitHub release and the report (issue #1559) is still open. Until a patch ships, add an organization ownership check to get_agent_execution_configuration in superagi/controllers/agent_execution_config.py, or block the route at the proxy.

## Timeline

- 2026-10-29T18:26:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-51905
- 2026-10-29T18:29:55+00:00 analyst — Read reporter issue #1559 (open, no maintainer response) and the releases page (latest v0.0.14, no patch). Fix status none is inferred from those pages, not a vendor statement; nothing marked verified. Sibling SuperAGI CVEs (51901, 51904, 51914) are the same class, unpatched.

## Documents

- [advisory] SuperAGI execution configuration cross-organization disclosure (issue #1559, open) https://github.com/TransformerOptimus/SuperAGI/issues/1559
- [mentions] SuperAGI releases (latest v0.0.14) https://github.com/TransformerOptimus/SuperAGI/releases

## From the sources

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in superagi/controllers/agent_execution_config.py. A remote authenticated attacker from one organization can read another organization's agent execution configuration by supplying the victim agent_id and agent_execution_id to /agent_executions_configs/details/agent_id/{agent_id}/agent_execution_id/{agent_execution_id}. The endpoint lacks an organization ownership check on the selected agent and execution.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_