What is CVE-2024-10267?

CVE-2024-10267 is a high-severity vulnerability in Superagi, classified under Exposure of Private Personal Information to an Unauthorized Actor. CVSS score: 7.5/10. Published 2025-03-20.

How severe is CVE-2024-10267?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Superagi

CVE-2024-10267

An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. An attacker can leak sensitive user information, including names, emails, and passwords, by attempting to register a new account with an email that is already in use. The server returns all information associated with the existing account. The vulnerable endpoint is located in the user registration functionality.

EPSS: 0.006 (44.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Superagi — versions 0.0.14
Transformeroptimus Transformeroptimus/superagi — versions unspecified

Weakness classification (CWE)

CWE-359 — Exposure of Private Personal Information to an Unauthorized Actor

References

security@huntr.dev (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2024-10267?: CVE-2024-10267 is a high-severity vulnerability in Superagi, classified under Exposure of Private Personal Information to an Unauthorized Actor. CVSS score: 7.5/10. Published 2025-03-20.
How severe is CVE-2024-10267?: High severity. CVSS v3 base score is 7.5 out of 10.