CVE-2026-66027: Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated at

Suna versions before 0.9.102 have a broken access control vulnerability (a flaw where the system fails to properly verify who should be allowed to access data) in its message queue API (the interface for managing task queues). Authenticated attackers can exploit missing ownership checks to read, delete, or manipulate message queues belonging to other users, including injecting malicious prompts into another user's AI agent session to execute commands with that user's permissions.