CVE-2024-9415

HIGH

superagi 0.0.14 - Path Traversal and Arbitrary File Write via File Upload

Title source: llm
STIX 2.1

Description

A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. This vulnerability allows an attacker to upload an arbitrary file to the server, potentially leading to remote code execution or overwriting any file on the server.

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0124
EPSS Percentile 65.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-22
Status published
Products (1)
superagi/superagi 0.0.14
Published Mar 20, 2025
Tracked Since Feb 18, 2026