Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-9439

SuperAGI is vulnerable to remote code execution in the latest version. The `agent template update` API allows attackers to control certain parameters, which are then fed to the eval function without any sanitization or checks in place. This vulnerability can lead to full system compromise.

Published

2025-03-20T10:15:49.077

Last Modified

2025-07-14T20:16:31.710

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.0: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-94
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application superagi superagi 0.0.14 Yes
References