What’s Vulnerable › Vulnerabilities
CVE-2024-10267: Information Disclosure in transformeroptimus/superagi
- Severity: high (CVSS 7.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2025-03-20 · updated 2026-06-17
- Weakness: CWE-359
Description
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. An attacker can leak sensitive user information, including names, emails, and passwords, by attempting to register a new account with an email that is already in use. The server returns all information associated with the existing account. The vulnerable endpoint is located in the user registration functionality.
Affected products
- TransformerOptimus SuperAGI: 0.0.14
References
Get alerted when CVE-2024-10267 or the next vulnerability affects your stack