{"vulnerability": "cve-2026-5190", "sightings": [{"uuid": "937593bd-f56c-4ff6-8ea2-2f8dfa5eb93a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5190", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miespm46su2r", "content": "", "creation_timestamp": "2026-03-31T18:30:59.727535Z"}, {"uuid": "6b80a426-8340-4330-ad0a-32295fa68845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5190", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mijwtwaci42w", "content": "", "creation_timestamp": "2026-04-02T19:28:18.182842Z"}, {"uuid": "044f2ebc-9b18-49a3-8951-aac8bb0e6766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5190", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mjshaouyhh2h", "content": "", "creation_timestamp": "2026-04-18T22:08:15.141742Z"}, {"uuid": "7ca6b121-2b9b-468d-ab2f-80d5aa1706f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5190", "type": "published-proof-of-concept", "source": "Telegram/E6DSeVNy1uX9gptW9gUevVOkWF-Be1dfF2SO_nx5Xk2F0EI", "content": "", "creation_timestamp": "2026-03-31T19:20:34.000000Z"}, {"uuid": "49e5cfe4-c285-4197-885d-b982d5c185b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51907", "type": "seen", "source": "https://gist.github.com/Ro1ME/357950ddd2f65566b1b33525651b5635", "content": "# CVE-2026-51907\n\n**Type:** Path Traversal\n**Product:** TaskingAI\n**Affected versions:** v0.3.0\n**Affected component:** `plugin/app/service/image_storage.py:image_storage-save_base64_image-the-preserved-real-v1-execute-witness-uses-qr`\n**Reference:** https://github.com/TaskingAI/TaskingAI/issues/374\n\n## Description\n\nIn TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the project_id parameter.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:06:12.000000Z"}, {"uuid": "7ab8afb4-444e-410e-9a8c-81078bfec0cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51906", "type": "seen", "source": "https://gist.github.com/Ro1ME/3430171ed3a7e6c42864f45b59c203cf", "content": "# CVE-2026-51906\n\n**Type:** Incorrect Access Control\n**Product:** TaskingAI\n**Affected versions:** v0.3.0\n**Affected component:** `plugin/app/service/image_storage.py:image_storage-save_url_image-the-preserved-real-v1-execute-witness-uses-dalle`\n**Reference:** https://github.com/TaskingAI/TaskingAI/issues/375\n\n## Description\n\nIn TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations on the server filesystem by manipulating the project_id parameter.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:06:10.000000Z"}, {"uuid": "3bf0e4dd-6f0c-4b67-b9a1-574daa512c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51905", "type": "seen", "source": "https://gist.github.com/Ro1ME/f803bb0db782428b212492c8157290db", "content": "# CVE-2026-51905\n\n**Type:** Incorrect Access Control\n**Product:** SuperAGI\n**Affected versions:** v0.0.14\n**Affected component:** `superagi/controllers/agent_execution_config.py:get_agent_execution_configuration`\n**Reference:** https://github.com/TransformerOptimus/SuperAGI/issues/1559\n\n## Description\n\nTransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in superagi/controllers/agent_execution_config.py. A remote authenticated attacker from one organization can read another organization's agent execution configuration by supplying the victim agent_id and agent_execution_id to /agent_executions_configs/details/agent_id/{agent_id}/agent_execution_id/{agent_execution_id}. The endpoint lacks an organization ownership check on the selected agent and execution.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:06:08.000000Z"}, {"uuid": "c71ce249-3c94-405b-8d63-a3c58dcd3d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51904", "type": "seen", "source": "https://gist.github.com/Ro1ME/3f712e2a9f643a08c6c825d25fbfe0e0", "content": "# CVE-2026-51904\n\n**Type:** Incorrect Access Control\n**Product:** SuperAGI\n**Affected versions:** \u2264v0.0.14\n**Affected component:** `superagi/controllers/agent_execution.py:create_agent_execution\nsuperagi/controllers/agent_execution.py:create_agent_run`\n**Reference:** http://superagi.com\n**Reference:** http://transformeroptimus.com\n\n## Description\n\nSuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected source snapshots, create_agent_execution and create_agent_run in superagi/controllers/agent_execution.py accept a caller-supplied agent_id and fail to verify that the referenced agent belongs to the authenticated user's organization. A remote authenticated attacker from one organization can create or start execution records for agents owned by another organization through /agentexecutions/add or /agentexecutions/add_run.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:06:06.000000Z"}, {"uuid": "4c5c2485-888c-4c6a-bad8-e5af5251c555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51903", "type": "seen", "source": "https://gist.github.com/Ro1ME/d5e2ff57f9ed891bac0d401c0a7e9aae", "content": "# CVE-2026-51903\n\n**Type:** Incorrect Access Control\n**Product:** SuperAGI\n**Affected versions:** v0.0.14\n**Affected component:** `superagi/controllers/agent_execution.py:get_agent_by_latest_execution`\n**Reference:** https://github.com/TransformerOptimus/SuperAGI\n\n## Description\n\nSuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllers/agent_execution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for another organization's project through /agentexecutions/get/latest/agent/project/{project_id} by supplying a victim project_id.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:06:03.000000Z"}, {"uuid": "f31f336f-cb5b-4689-838b-2061c04f4952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51902", "type": "seen", "source": "https://gist.github.com/Ro1ME/68d7dfa6ecc41caa9945a02dd31156ca", "content": "# CVE-2026-51902\n\n**Type:** Incorrect Access Control\n**Product:** SuperAGI\n**Affected versions:** \u2264v0.0.14\n**Affected component:** `superagi/controllers/agent.py:get_agents_by_project_id`\n**Reference:** https://github.com/TransformerOptimus/SuperAGI/issues/1558\n\n## Description\n\nSuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/{project_id} allows authenticated users from one organization to retrieve the complete list of agents belonging to a different organization's project. The endpoint accepts a project_id parameter but does not verify that the project belongs to the authenticated user's organization.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:06:01.000000Z"}, {"uuid": "090b55a1-cca0-4abc-9a7b-4fae7430daf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51901", "type": "seen", "source": "https://gist.github.com/Ro1ME/12fc58befd7fa2693bac98a91a4debf9", "content": "# CVE-2026-51901\n\n**Type:** Incorrect Access Control\n**Product:** SuperAGI\n**Affected versions:** \u2264v0.0.14\n**Affected component:** `superagi/controllers/agent_execution.py:schedule_existing_agent`\n**Reference:** https://github.com/TransformerOptimus/SuperAGI/issues/1557\n\n## Description\n\nSuperAGI up to 0.0.14 is vulnerable to Incorrect Access Control. The agent execution controller endpoint /api/agentexecutions/schedule allows authenticated users from one organization to schedule existing agents belonging to a different organization without proper authorization checks. The endpoint accepts an agent_id parameter but does not verify that the agent belongs to the authenticated user's organization.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:05:59.000000Z"}]}