Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects the function extract_with_bs4/extract_with_3k/extract_with_lxml of the file superagi/helper/webpage_extractor.py of the component WebScraperTool. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-6616 A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects the function extract_with_bs4/extract_with_3k/extract_with_lxml of … https://www.cve.org/CVERecord?id=CVE-2026-6616
Post summary
CVE-2026-6616 was discovered in TransformerOptimus SuperAGI v0.0.14, affecting specific extraction functions. No PoC, exploit, or patch details are provided.
CVE-2026-6616 Server-Side Request Forgery in TransformerOptimus SuperAGI Up to 0.0.14 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6616
Post summary
Disclosed SSRF vulnerabilities in TransformerOptimus SuperAGI versions up to 0.0.14; no PoC or exploit details are provided.