SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-57494

HIGH · CVSS 7.1 EPSS 0.22% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-20 · Last synced 2026-08-19

CyberRota Analysis

AI-Generated

In AgenticMail versions prior to 0.9.64, low-privileged authenticated agents can exploit a vulnerability to enumerate and manipulate other agents' tasks by accessing task IDs through a simple API call. This allows unauthorized task claims and modifications, undermining the intended access controls and leading to potential data integrity issues. Organizations using AgenticMail should prioritize updating to version 0.9.64 to mitigate this cross-agent authorization bypass risk.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-57494
Severity
HIGH
CVSS
7.1
EPSS
0.22%

Original NVD Description

AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to `GET /api/agenticmail/tasks/pending?assignee=<name>`. The returned task objects include the task IDs and payloads. The same task IDs can then be used with the capability-style task mutation endpoints (`/tasks/:id/claim`, `/tasks/:id/result`, `/tasks/:id/complete`, `/tasks/:id/fail`) to claim, complete, or fail tasks assigned to a different agent. Because ordinary authenticated agents can discover agent names through `GET /api/agenticmail/accounts/directory`, the task ID effectively stops being a secret capability. This turns the intended capability model into a cross-agent authorization bypass. Version 0.9.64 contains a fix.