CVE-2026-51916

Summary

The TransformerOptimus SuperAGI application has an access control flaw that allows unauthenticated users to delete any knowledge object by calling the delete_user_knowledge endpoint without proper authentication or organization ownership verification.

Exploitability

Exploitation is straightforward as attackers can directly call the POST /knowledges/delete/{knowledge_id} endpoint without needing credentials, with no additional preconditions required.

Blast radius

The impact could be significant as attackers could delete any user's knowledge data, potentially affecting multiple users' AI training data and knowledge bases across the system.

Detection

Monitor for unauthorized POST requests to /knowledges/delete/{knowledge_id} endpoints with no authentication headers present, particularly when these requests result in successful deletions of knowledge objects.

Prioritized remediation

Upgrade to SuperAGI v0.0.15 or later which includes the fix for the incorrect access control vulnerability in delete_user_knowledge.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.