CVE-2026-67548

The self-hosted AI agent OS taOS (tinyagentos) is vulnerable to Missing Authorization (CWE-862) in versions prior to 1.0.0-beta.25 . The software incorrectly registers all system settings routes under an APIRouter() instance that lacks an admin authorization dependency. This allows any authentica...