PT-2025-12284 · Superagi · Superagi

Published 2025-03-20 · Updated 2025-07-14 · CVE-2024-9439

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SuperAGI (affected versions not specified)

Description SuperAGI is vulnerable to remote code execution. The agent template update API allows attackers to control certain parameters, which are then fed to the eval function without any sanitization or checks. This can lead to full system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-9439

Affected Products

Superagi

References · 6

• 🔥 https://huntr.com/bounties/d710884f-b5ab-4b31-a2e6-e4b38488def1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-9439 · Security Note
• https://osv.dev/vulnerability/CVE-2024-9439 · Vendor Advisory
• https://t.me/cvenotify/128930 · Telegram Post
• https://twitter.com/CveFindCom/status/1902669866126991651 · Twitter Post
• https://twitter.com/CVEnew/status/1902671099323695404 · Twitter Post