CVE-2024-9431

8.8 highEPSS 0.6%

High (8.8) in superagi superagi. EPSS 0.6% chance of exploitation in the next 30 days.

In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability. After logging into the system, users can change the passwords of other users, leading to potential account takeover.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-620
Published: 2025-03-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

superagi:superagi

References

https://huntr.com/bounties/9b33d7c1-ed0a-4f5b-a378-694570fd990b

Check your stack JSON