{"data":{"id":"0ee962b9-a308-473d-bc0c-75b46a5c2f84","title":"CVE-2026-66027: Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated…","summary":"Suna before 0.9.102 has a broken access control flaw in its message queue API. Authenticated attackers can read other users' pending prompt queues, read or delete their sessions, and inject prompts into another user's session queue, which the background drainer forwards to the victim's running AI agent with the victim's credentials and permissions.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-66027","publishedAt":"2026-07-24T16:16:55.983Z","cveId":"CVE-2026-66027","cweIds":["CWE-862"],"cvssScore":"8.3","cvssSeverity":"high","severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Suna"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Suna broken access control in message queue API allows cross-user access","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00456,"epssCheckedAt":"2026-11-12T15:03:09.941Z","kevDateAdded":null,"advisoryAliases":["GHSA-59cg-fj2q-33c4"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T12:11:09.004Z","patchAvailable":null,"disclosureDate":"2026-07-24T16:16:55.983Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}