CVE-2026-57495: AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/claudecode prior to version 0.2.39,

AgenticMail, a tool that lets AI agents handle email, had a critical security flaw in several versions where any external email could trick an AI agent into running dangerous commands with full permissions. The vulnerability worked through prompt injection (hiding malicious instructions in email content), allowing attackers to control a privileged agent that could read files, execute code, and access the user's email and web tools. A safer version of the code already existed in the same repository but wasn't applied to the vulnerable email handler.