Remote Code Execution Vulnerability in SuperAGI by SuperAGI, Inc.

CVE-2024-9439

What is CVE-2024-9439?

SuperAGI contains a security weakness that allows an attacker to execute arbitrary code remotely. Through its agent template update API, attackers can manipulate certain input parameters. These parameters are processed by the eval function without proper sanitization or validation, potentially enabling full system control. Organizations using affected versions of SuperAGI should prioritize applying patches and reviewing security measures to mitigate this risk.

References