HighVulnerability
CVE-2026-57494: AgenticMail cross-agent task access through pending task enumeration
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-57494
- Published
- Record updated
- Affected
- @agenticmail/api < 0.9.64
- Fixed in
- 0.9.64
- released June 18, 2026, 32 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.3%
Summary
CVE-2026-57494 affects @agenticmail/api before version 0.9.64. A low-privileged authenticated agent can list another agent's pending and claimed tasks through GET /api/agenticmail/tasks/pending?assignee=<name>, which returns task IDs and payloads. Those IDs can then be used on the /tasks/:id/claim, /result, /complete and /fail endpoints to act on tasks assigned to a different agent, because agent names are discoverable via GET /api/agenticmail/accounts/directory.
Mitigation
Fixed in 0.9.64.
Topics
Related items
- MediumCVE-2026-126994: braindecode model config deserialization flaw via activation argumentSimilar attack · NVD/CVE Database
- MediumAI found Linux kernel bugs that remained undetected for decadesSimilar attack · CSO Online
- InfoInside an AI Attack Against a US RetailerSimilar attack · Dark Reading
- HighCVE-2026-67547: taOS remote code execution via skill-exec endpoint for non-admin usersSimilar attack · NVD/CVE Database
- MediumCVE-2026-65957: Helio dashboard CORS origin validation bypass via private-network prefix matchSimilar attack · NVD/CVE Database