CVE-2026-84779: Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents <= 1.51.0 versions.
highvulnerability
security
Summary
Agentimus, a plugin that integrates AI and SEO tools with AI agents, has a broken access control vulnerability (a security flaw where users can access data or features they shouldn't be able to) in version 1.51.0 and earlier. This flaw specifically affects the subscriber functionality, meaning attackers could potentially access subscriber-level features or data without proper authorization.
Vulnerability Details
CVSS Score
8.1(high)
EPSS (30-day exploit probability)
EPSS: 0.0%
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
network
Attack Complexity
low
Privileges Required
low
User Interaction
none
Disclosure Date
September 3, 2026
Classification
Attack Type
Other
Attack SophisticationTrivial
Impact (CIA+S)
confidentialityintegrity
Affected Vendors
Related Issues
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-84779
First tracked: September 3, 2026 at 02:09 PM
Classified by LLM (prompt v3) · confidence: 85%