CVE-2026-51904

Summary

The flaw allows a remote authenticated attacker to create or start execution records for agents owned by another organization, leading to unauthorized access and potential control of sensitive operations.

Exploitability

Exploitation is relatively straightforward as it requires an authenticated attacker from one organization to target another. Precondition is the presence of an authenticated user from the attacker's organization.

Blast radius

If exploited, the impact could be severe, as it allows unauthorized execution of sensitive operations, potentially leading to data breaches or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to SuperAGI v0.0.15 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.