CVE-2024-21552
- State
- Published
- Severity
- 9.8 Critical
- Published
- Jul 22, 2024
- Updated
- Aug 1, 2024
- Reserved
- Dec 22, 2023
Description
All versions of `SuperAGI` are vulnerable to Arbitrary Code Execution due to unsafe use of the ‘eval’ function. An attacker could induce the LLM output to exploit this vulnerability and gain arbitrary code execution on the SuperAGI application server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | snyk |
Weaknesses
- CWE-94 Arbitrary Code Execution
Affected Products
| Product | Versions |
|---|---|
SuperAGIn/a |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.