CVE-2026-57494
- Source
- https://cve.org/CVERecord?id=CVE-2026-57494
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57494.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-57494
- Aliases
- Published
- 2026-07-20T22:01:43.891Z
- Modified
- 2026-07-25T03:56:33.806564806Z
- Severity
-
- 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- AgenticMail: Cross-agent task authorization bypass in AgenticMail API
- Details
-
AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to
GET /api/agenticmail/tasks/pending?assignee=<name>. The returned task objects include the task IDs and payloads. The same task IDs can then be used with the capability-style task mutation endpoints (/tasks/:id/claim,/tasks/:id/result,/tasks/:id/complete,/tasks/:id/fail) to claim, complete, or fail tasks assigned to a different agent. Because ordinary authenticated agents can discover agent names throughGET /api/agenticmail/accounts/directory, the task ID effectively stops being a secret capability. This turns the intended capability model into a cross-agent authorization bypass. Version 0.9.64 contains a fix. - Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-639", "CWE-862" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57494.json" }- References