{"data":{"id":"0bb79dbf-4ae5-47af-a1e7-68726b1d8ff9","title":"CVE-2026-47255: AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and…","summary":"CVE-2026-47255 affects @agenticmail/api before 0.9.32 and @agenticmail/core before 0.9.10, which give AI agents real email addresses and phone numbers. The source describes several weaknesses in these packages, including inactive-agent hour filtering, storage SQL identifier validation, metadata-backed ownership checks for raw storage SQL, and SMTP envelope/header control-character validation. It also notes that TLS certificate verification for MailSender was not the default before the fix.","solution":"@agenticmail/api 0.9.32 and @agenticmail/core 0.9.10 are patched.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-47255","publishedAt":"2026-07-20T22:17:15.403Z","cveId":"CVE-2026-47255","cweIds":["CWE-20","CWE-89","CWE-284","CWE-319","CWE-798"],"cvssScore":"8.2","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@agenticmail/api@<= 0.9.31 (fixed: 0.9.32)","@agenticmail/core@<= 0.9.9 (fixed: 0.9.10)"],"affectedPackageNames":["@agenticmail/api","@agenticmail/core"],"affectedPackageRefs":["npm:@agenticmail/api","npm:@agenticmail/core"],"affectedVendors":[],"affectedVendorsRaw":["AgenticMail","@agenticmail/api","@agenticmail/core"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"AgenticMail API and core flaws in storage SQL validation and SMTP handling","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00252,"epssCheckedAt":"2026-11-04T18:09:13.655Z","kevDateAdded":null,"advisoryAliases":["GHSA-wjjv-3mj2-39hf"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:46:20.834Z","patchAvailable":true,"disclosureDate":"2026-07-20T22:17:15.403Z","fixReleasedAt":"2026-05-18T19:47:36.608Z","daysToFix":-63,"fixCheckedAt":"2026-10-29T21:32:59.033Z","capecIds":["CAPEC-66"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@agenticmail/api","fixedVersion":"0.9.32","matchedVersion":"0.9.32","fixReleasedAt":"2026-05-18T19:47:43.554Z","daysToFix":-63,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:32:58.886Z"},{"ecosystem":"npm","name":"@agenticmail/core","fixedVersion":"0.9.10","matchedVersion":"0.9.10","fixReleasedAt":"2026-05-18T19:47:36.608Z","daysToFix":-63,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:32:58.886Z"}]}}