{"uuid": "d4f327fc-f39c-4680-be70-673316cacaae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51899", "type": "seen", "source": "https://gist.github.com/Ro1ME/c1e18e9c64c324db0bccfaa547eb2d05", "content": "# CVE-2026-51899\n\n**Type:** Incorrect Access Control\n**Product:** SuperAGI\n**Affected versions:** \u2264v0.0.14\n**Affected component:** `superagi/controllers/agent.py:create_agent_with_config\nsuperagi/controllers/agent.py:create_and_schedule_agent\nsuperagi/controllers/agent.py:edit_schedule`\n**Reference:** https://github.com/TransformerOptimus/SuperAGI/issues/1556\n\n## Description\n\nIn SuperAGI v0.0.14 and prior, controller endpoints (/api/agents/create, /api/agents/schedule, /api/agents/delete, /api/agents/edit_schedule, /api/agents/stop_schedule) allow authenticated users from one organization to create, schedule, edit, stop, and delete agents belonging to a different organization's project. The endpoints accept a project_id parameter but do not verify that the project belongs to the authenticated user's organization.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:05:56.000000Z"}