| Title | TransformerOptimus SuperAGI <=v0.0.14 Path Traversal |
|---|
| Description | Due to improper implementation, SuperAGI EmailToolKit does not validate the file names of email attachments, resulting in path traversal when saving. |
|---|
| Source | ⚠️ https://github.com/TransformerOptimus/SuperAGI/issues/1466 |
|---|
| User | Anonymous User |
|---|
| Submission | 06/10/2025 04:03 (10 months ago) |
|---|
| Moderation | 06/19/2025 08:56 (9 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 313284 [TransformerOptimus SuperAGI up to 0.0.14 EmailToolKit read_email.py download_attachment filename path traversal] |
|---|
| Points | 15 |
|---|