A critical path traversal vulnerability in TransformerOptimus SuperAGI allows unauthenticated remote attackers to execute arbitrary file writes, potentially leading to remote code execution.

The application fails to sanitize the filename attribute during multipart file uploads in the superagi/controllers/resources.py controller. This allows an unauthenticated attacker to inject directory traversal sequences, enabling the placement of files in arbitrary locations on the host filesystem.

The ability to write arbitrary files to the server filesystem poses a catastrophic risk to confidentiality, integrity, and availability. An attacker could overwrite critical system configuration files or upload malicious scripts to web-accessible directories to achieve remote code execution. Given the CVSS score of 7.3, this vulnerability represents a high-severity threat that could lead to full system compromise and significant data exfiltration.

Immediate Action: As no official patch is currently available, restrict access to the /resources/add/{agent_id} endpoint via network segmentation or firewall rules until a secure version is released.

Proactive Monitoring: Monitor server filesystem integrity and review access logs for requests containing directory traversal sequences, such as ../ strings, directed at the resource upload controller.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured to inspect multipart form data and block requests containing path traversal patterns in the filename field.

Public Exploit Available: Yes, a proof-of-concept script is available via the researcher's GitHub Gist.

Organizations utilizing SuperAGI must treat this vulnerability with high priority due to the availability of public exploit code and the ease of execution. Until the vendor provides a formal security update, administrators should implement strict ingress filtering to the affected endpoint or disable the resource upload functionality entirely to prevent potential system compromise.