CVE-2026-57494

AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to GET /api/agenticmail/tasks/pending?assignee=...

CVE-2026-57494 AgenticMail: Cross-agent task authorization bypass in AgenticMail API

AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to GET /api/agenticmail/tasks/pending?assignee=...

CVE-2026-57494

The CVE describes a cross‑agent task authorization bypass in AgenticMail. In @agenticmail/api versions before 0.9.64, a low‑privileged authenticated agent can enumerate another agent’s pending/claimed tasks via GET /api/agenticmail/tasks/pending?assignee=, receiving task IDs and payloads. Those I...

PT-2026-61738

Name of the Vulnerable Software and Affected Versions @agenticmail/api versions prior to 0.9.64 Description A low-privileged authenticated agent can perform a cross-agent authorization bypass. By using the GET /api/agenticmail/accounts/directory endpoint, an attacker can discover agent names. The...

Firejail: Multiple vulnerabilities

Background A SUID program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces and seccomp-bpf. Description Multiple vulnerabilities have been discovered in Firejail. Please review the CVE identifiers referenced below f...

CVE-2019-7296

typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula...

CVE-2019-7296

typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula...