Incorrect Access Control in SuperAGI Agent Execution

Executive Summary

CVE-2026-51901 is an Incorrect Access Control vulnerability in SuperAGI versions up to 0.0.14. The /api/agentexecutions/schedule endpoint allows authenticated users to schedule agents belonging to other organizations without proper authorization checks. The endpoint accepts an agent_id parameter but does not verify if the agent belongs to the authenticated user's organization, enabling cross-organization agent scheduling.

The flaw stems from insufficient validation in the get_agents_by_project_id function, which checks for project existence but does not enforce organizational boundaries. This allows users to enumerate agents and their operational status across different organizations, potentially exposing sensitive tenant metadata.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor API logs for unauthorized access attempts to the /api/agentexecutions/schedule endpoint. Look for requests with modified agent_id parameters from users outside the expected organization. Check agent execution history for unexpected scheduling events across organizations.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to schedule agents belonging to other organizations without authorization. This could lead to unauthorized control over victim's agents, allowing potential data access or manipulation. Exploitation does not require error logs and can be performed using tools like Burp Suite or browser developer tools.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update SuperAGI to the latest version beyond 0.0.14. Implement strict input validation for the agent_id parameter to ensure it belongs to the authenticated user's organization. Add role-based access control to enforce organizational boundaries for agent scheduling.

Useful 0 Not Useful 0