Information Disclosure Vulnerability in TransformerOptimus SuperAGI

CVE-2024-10267

What is CVE-2024-10267?

An information disclosure vulnerability has been identified in TransformerOptimus' SuperAGI. This issue allows attackers to leak sensitive user information such as names, email addresses, and passwords when they attempt to register for a new account with an email that is already associated with an existing account. The system inadvertently exposes data linked to the existing account due to flaws in the user registration process, posing a significant security risk to user privacy.

References