SuperAGI ≤v0.0.14 has an access control flaw that allows cross-organization execution of another's Agent (CVE-2026-51904)

SuperAGI up to v0.0.14 has an improper access control vulnerability (CVE-2026-51904, CWE-284) in create_agent_execution and create_agent_run in superagi/controllers/agent_execution.py. These two endpoints accept an agent_id passed by the caller but do not verify that the Agent belongs to the organization of the authenticated user, so a remote authenticated attacker from one organization can create or start execution records for an Agent in another organization via /agentexecutions/add or /agentexecutions/add_run. The maintainer should verify the agent's organization ownership before creating and starting executions; the current materials do not provide a confirmed fixed version.