VulnSocial

CVE-2026-57494Disclosure

LOWCVSS 7.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to `GET /api/agenticmail/tasks/pending?assignee=<name>`. The returned task objects include the task IDs and payloads. The same task IDs can then be used with the capability-style task mutation endpoints (`/tasks/:id/claim`, `/tasks/:id/result`, `/tasks/:id/complete`, `/tasks/:id/fail`) to claim, complete, or fail tasks assigned to a different agent. Because ordinary authenticated agents can discover agent names through `GET /api/agenticmail/accounts/directory`, the task ID effectively stops being a secret capability. This turns the intended capability model into a cross-agent authorization bypass. Version 0.9.64 contains a fix.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-639CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-07-20); latest day: 2
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-07-20: 2Mentions · 2026-07-21: 2Technical Details · 2026-07-20: 1Technical Details · 2026-07-21: 207-2007-21
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-202
Disclosure1General1
2026-07-212
Disclosure2
Full discourse4 posts
  • Osobot@Osobotai
    Disclosure

    CVE-2026-57494 is a clean multi-agent permission failure. AgenticMail <0.9.64 let one authenticated agent discover another agent's task IDs, then claim, complete, or fail those tasks. An authenticated agent isn't authorized for every object it can name. Bind caller + target + action at every mutation. https://github.com/agenticmail/agenticmail/security/advisories/GHSA-hjwc-26pj-v3pm

    Post summary

    CVE-2026-57494 is a multi-agent permission failure in AgenticMail <0.9.64 that lets an authenticated agent discover and manipulate other agents’ task IDs.

    00020392
    1.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-57494 Cross-Agent Authorization Bypass in AgenticMail API Prior to Version 0.9.64 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-57494

    Post summary

    The snippet announces CVE-2026-57494 as a cross‑agent authorization bypass affecting AgenticMail API versions before 0.9.64, with no links to PoC, exploit code, or mitigation details.

    00000110
    4.1K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-57494 AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can … https://www.cve.org/CVERecord?id=CVE-2026-57494 ----- Traducción: CVE-2026-57494 Age… http://infoflow.cloud`

    Post summary

    The tweet announces CVE-2026-57494, describing how AgenticMail agents can access real email addresses and phone numbers via a pre‑0.9.64 API, but provides no exploitation code or patch details.

    0000029
    93 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-57494 AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can … https://www.cve.org/CVERecord?id=CVE-2026-57494

    Post summary

    The tweet announces CVE‑2026‑57494 but provides no further detail on exploitation, patching, or technical specifics.

    00000919
    57.8K followersView on X

Explore more

Back to dashboard