Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function get_vector_db_details of the file superagi/controllers/vector_dbs.py of the component Vector Database Management Endpoint. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-19 | 1 | Disclosure1 |
| 2026-04-20 | 1 | General1 |
| 2026-04-28 | 1 | Patch1 |
🚨 HIGH SEVERITY: CVE-2026-6582 (CVSS 7.3) TransformerOptimus SuperAGI ≤0.0.14 - Missing authentication in vector DB endpoint allows remote exploitation. Exploit code public. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/ps5LBFja5z
Post summary
The tweet highlights a high‑severity vulnerability (CVE‑2026‑6582) with a publicly available exploit and urges immediate patching.
CVE-2026-6582 A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function get_vector_db_details of the file superagi/controllers/vector_… https://www.cve.org/CVERecord?id=CVE-2026-6582
Post summary
The text reports a newly discovered flaw in TransformerOptimus SuperAGI up to version 0.0.14, affecting the get_vector_db_details function, but does not provide further technical details, patches, or exploitation evidence.
CVE-2026-6582 Authentication Bypass in TransformerOptimus SuperAGI Vector Database Management Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6582
Post summary
The text announces CVE‑2026‑6582, describing an Authentication Bypass in the TransformerOptimus SuperAGI Vector Database Management Endpoint, and provides a link for further details.