CyberRota Analysis
AI-GeneratedThe vulnerability in Suna prior to version 0.9.102 allows authenticated attackers to bypass access controls in the message queue API, enabling them to manipulate and access queue resources of other users. This could lead to unauthorized reading and deletion of user sessions, as well as the injection of malicious prompts into another user's session, potentially compromising the victim's AI agent with their credentials. Organizations utilizing this software should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.