CVE-2026-18974
Received Received - Intake

Information Disclosure in Super-Agent-Party via Server.py

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulDB

Description
A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function get_file_content of the file server.py of the component execute_tool_manually Endpoint. The manipulation of the argument tool_name/tool_params results in information disclosure. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-18974
EUVD
EUVD-2026-53695

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
heshengtao super-agent-party to 0.4.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an arbitrary local file read issue in the super-agent-party package up to version 0.4.1. The get_file_content function in server.py does not properly validate file paths when accessed via the execute_tool_manually endpoint. Attackers can manipulate tool_name or tool_params to read any file accessible by the backend process, including sensitive files like configuration files or secrets.

Detection Guidance

To detect this vulnerability, check if your system runs super-agent-party versions up to 0.4.1. Inspect server.py and py/load_files.py for the get_file_content function and get_content() logic. Monitor POST requests to /execute_tool_manually with tool_params.file_url containing raw filesystem paths.

Impact Analysis

This vulnerability allows attackers to read sensitive files on the system running the super-agent-party software. If exploited, it could lead to exposure of confidential data such as API keys, configuration files, or other secrets. The impact is higher in shared or remotely accessible deployments where multiple users interact with the system.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA by exposing sensitive personal or health data. GDPR requires protection of personal data, and HIPAA mandates safeguards for protected health information. A successful exploit could result in data breaches, leading to legal penalties and reputational damage.

Mitigation Strategies

Immediately upgrade super-agent-party to a version beyond 0.4.1 if available. If no update exists, restrict access to the /execute_tool_manually endpoint. Validate all file_url inputs in tool_params to ensure they are remote URLs only. Remove or disable the get_file_content function if unused.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18974. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart