transformeroptimus Superagi Plaintext Password Exposure Vulnerability in User API Endpoint

Vulnerability

A vulnerability in transformeroptimus/superagi version 0.0.14 allows the API endpoint '/api/users/get/{id}' to return user passwords in plaintext. This issue could lead to account takeover by enabling an attacker to retrieve the password of another user.

Impact

Exploitation of this vulnerability could result in unauthorized access to user accounts, allowing attackers to impersonate users or access sensitive information.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
6.2
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.