VYPR
← All advisories
High severity8.8NVD Advisory· Published Mar 20, 2025· Updated Jun 17, 2026

CVE-2024-9439

CVE-2024-9439

Description

SuperAGI is vulnerable to remote code execution in the latest version. The agent template update API allows attackers to control certain parameters, which are then fed to the eval function without any sanitization or checks in place. This vulnerability can lead to full system compromise.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • transformeroptimus/transformeroptimus/superagiv5
    Range: unspecified
  • SuperAGI Project/Superagillm-fuzzy2 versions
    latest+ 1 more
    • (no CPE)range: latest
    • cpe:2.3:a:superagi:superagi:0.0.14:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.