{"data":{"id":"5b22b3f3-d16f-423c-a353-e6edf1f74bc9","title":"CVE-2026-50287: AgenticMail gives AI agents real email addresses and phone numbers. Prior to version 0.9.27, @agenticmail/mcp exposes a…","summary":"CVE-2026-50287 affects @agenticmail/mcp before version 0.9.27 when started with --http or MCP_HTTP=1, which enables a Streamable HTTP transport. The /mcp endpoint accepts requests without any HTTP authentication layer, so a remote client can initialize a session and call tools directly. GitHub, Inc. rates it CVSS-B 8.7 HIGH (CVSS:4.0), with high confidentiality impact and no privileges or user interaction required.","solution":"Fixed in version 0.9.27.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-50287","publishedAt":"2026-06-12T20:16:46.940Z","cveId":"CVE-2026-50287","cweIds":["CWE-306"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@agenticmail/mcp@< 0.9.27 (fixed: 0.9.27)"],"affectedPackageNames":["@agenticmail/mcp"],"affectedPackageRefs":["npm:@agenticmail/mcp"],"affectedVendors":[],"affectedVendorsRaw":["AgenticMail","@agenticmail/mcp"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"AgenticMail MCP server missing authentication on HTTP /mcp endpoint","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00359,"epssCheckedAt":"2026-10-27T18:10:58.281Z","kevDateAdded":null,"advisoryAliases":["GHSA-63gr-g7jc-v8rg"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:38.117Z","patchAvailable":true,"disclosureDate":"2026-06-12T20:16:46.940Z","capecIds":["CAPEC-115"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}