Remote Code Execution in transformeroptimus/superagi

The impact of CVE-2024-9439 is severe. An attacker exploiting this vulnerability can execute arbitrary code on the system running SuperAGI, effectively achieving full system compromise. This could involve data exfiltration, installation of malware, disruption of services, or complete takeover of the affected machine. The lack of sanitization means that even relatively simple payloads could be injected and executed. Given SuperAGI's potential use in automated decision-making and data processing, a successful attack could have far-reaching consequences, potentially impacting sensitive data and critical operations. The ability to execute arbitrary code opens the door to a wide range of malicious activities, making this a high-priority vulnerability to address.

Organizations deploying SuperAGI in production environments, particularly those relying on automated agent templates for critical tasks, are at significant risk. Systems with exposed SuperAGI API endpoints without proper input validation are especially vulnerable. Shared hosting environments where multiple users share the same SuperAGI instance also face increased risk due to the potential for cross-tenant exploitation.

• python / server:

import os
import subprocess

def check_superagi_api(api_endpoint):
    try:
        result = subprocess.run(['curl', '-X', 'POST', api_endpoint, '-d', 'malicious_payload'], capture_output=True, text=True, timeout=5)
        if result.returncode != 0:
            print(f"Potential vulnerability detected: API returned error code {result.returncode}")
        else:
            print(f"API response: {result.stdout}")
    except Exception as e:
        print(f"Error during API check: {e}")

# Example usage (replace with your API endpoint)
api_endpoint = 'http://localhost:8000/api/agent_template_update'
check_superagi_api(api_endpoint)

• generic web:

curl -X POST -d 'malicious_payload' http://your-superagi-server/api/agent_template_update 2>&1 | grep -i error

1. 2025-03-20Disclosure

   disclosure

1. Reserviert2024-10-02
2. Veröffentlicht2025-03-20
3. EPSS aktualisiert2026-04-02

Due to the lack of a currently available patch, immediate mitigation strategies are crucial. Implement strict input validation on the agent template update API to prevent malicious parameters from being processed. Consider temporarily disabling the API if it's not essential for current operations. Employ a Web Application Firewall (WAF) to filter potentially malicious requests targeting the API endpoint. Thoroughly review and audit all agent templates to identify and remove any potentially vulnerable configurations. Monitor system logs for suspicious activity related to the API, such as unexpected parameter values or unusual code execution patterns. Once a patch is released, upgrade SuperAGI to the fixed version immediately and verify the fix by attempting to reproduce the vulnerability with known attack vectors.