What happened
CVE-2026-51902 / CVE-2026-51903 / CVE-2026-51905: SuperAGI up to v0.0.14 has improper access control across several endpoints — /api/agents/get/project/{project_id}, get_agent_by_latest_execution in agent_execution.py, and get_agent_execution_configuration in agent_execution_config.py — which accept a project/agent identifier without verifying the object belongs to the authenticated user's organization. An authenticated user from one organization can read another organization's agent lists, latest execution metadata, and execution configuration.
Why it matters
A multi-tenant agent platform leaking per-organisation agent definitions, execution state and configuration between tenants violates tenant isolation and can expose workflow logic, prompts, and connectors/secrets used by another org's agents.
Attack vector
An authenticated user supplies another organization's project/agent identifier to the unguarded endpoints to read that org's agents, execution metadata, and execution configuration.
Affected systems
TransformerOptimus SuperAGI up to v0.0.14.
Mitigation
Patch/upgrade SuperAGI; enforce organization-ownership checks on project_id and agent-identifier parameters in the affected controllers.