https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:00:37.069407+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-248248 EUVD-2026-248248 2026-10-06T11:00:37.118226+00:00 EUVD-2026-248248 https://cve.radiocsirt.org/vuln/fkie_cve-2025-51475 fkie_cve-2025-51475 2026-10-06T11:00:37.118266+00:00

Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload endpoint, due to improper handling of directory traversal in os.path.join() and lack of path validation in get_root_input_dir().

 https://cve.radiocsirt.org/vuln/ghsa-7h3r-f4vp-3r8f GHSA-7h3r-f4vp-3r8f 2026-10-06T11:00:37.118301+00:00

Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload endpoint, due to improper handling of directory traversal in os.path.join() and lack of path validation in get_root_input_dir().