CVE-2026-57495: Missing Authentication for Critical Function

AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/claudecode prior to version 0.2.39, @agenticmail/codex prior to version 0.1.33, @agenticmail/core prior to version 0.9.43, and @agenticmail/openclaw prior to version 0.5.71, two inbound-mail handlers act on a...

CVE-2026-57494: Authorization Bypass Through User-Controlled Key

AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to GET /api/agenticmail/tasks/pending?assignee=...

CVE-2026-47255: Improper Input Validation

AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to validation and and binding of inactive-agent hour filtering; storage SQL identifier validation; metadata-backed...

@agenticmail/api (>=0.2.26, <=0.7.21), @agenticmail/claudecode (>=0.1.0, <=0.1.17) +5 more potentially affected by unknown CVE via @agenticmail/core (>=0.2.26, <=0.7.6)

@agenticmail/core NPM version =0.2.26, =0.2.26, =0.1.0, =0.5.57, =0.2.1, =0.5.40, =0.5.40, =0.3.0, =0.5.56 Source cves: unknown CVE Source advisory: SNYK:JS-AGENTICMAILCORE-17817088...

@agenticmail/api (>=0.2.26, <=0.7.21), @agenticmail/claudecode (>=0.1.0, <=0.1.17) +5 more potentially affected by CVE-2026-57495 via @agenticmail/core (>=0.2.26, <=0.7.6)

@agenticmail/core NPM version =0.2.26, =0.2.26, =0.1.0, =0.5.57, =0.2.1, =0.5.40, =0.5.40, =0.3.0, =0.5.56 Source cves: CVE-2026-57495 Source advisory: GHSA-FQ4X-789W-JG5H...

@agenticmail/api (>=0.6.0, <=0.7.21), @agenticmail/cli (>=0.6.0, <=0.8.36) potentially affected by unknown CVE via @agenticmail/claudecode (0.1.17)

@agenticmail/claudecode NPM version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on @agenticmail/claudecode and may be impacted: - @agenticmail/api =0.6.0, =0.6.0, =0.8.36 Source cves: unknown CVE Source advisory:...

@agenticmail/api (>=0.6.0, <=0.7.21), @agenticmail/cli (>=0.6.0, <=0.8.36) potentially affected by CVE-2026-57495 via @agenticmail/claudecode (0.1.17)

@agenticmail/claudecode NPM version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on @agenticmail/claudecode and may be impacted: - @agenticmail/api =0.6.0, =0.6.0, =0.8.36 Source cves: CVE-2026-57495 Source advisory: OSV:GHSA-FQ4X-789W-JG5H...

@agenticmail/api (>=0.2.26, <=0.7.21), @agenticmail/claudecode (>=0.1.0, <=0.1.17) +5 more potentially affected by CVE-2026-57495 via @agenticmail/core (>=0.2.26, <=0.7.6)

@agenticmail/core NPM version =0.2.26, =0.2.26, =0.1.0, =0.5.57, =0.2.1, =0.5.40, =0.5.40, =0.3.0, =0.5.56 Source cves: CVE-2026-57495 Source advisory: OSV:GHSA-FQ4X-789W-JG5H...

@agenticmail/api (>=0.6.0, <=0.7.21), @agenticmail/cli (>=0.6.0, <=0.8.36) potentially affected by CVE-2026-57495 via @agenticmail/claudecode (0.1.17)

@agenticmail/claudecode NPM version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on @agenticmail/claudecode and may be impacted: - @agenticmail/api =0.6.0, =0.6.0, =0.8.36 Source cves: CVE-2026-57495 Source advisory: GHSA-FQ4X-789W-JG5H...

AgenticMail: Cross-agent task authorization bypass in AgenticMail API

Summary A low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to GET /api/agenticmail/tasks/pending?assignee=. The returned task objects include the task IDs and payloads. The same task IDs can then be used with the...

Missing Authorization

Overview @agenticmail/api is a REST API server for AgenticMail — email, SMS, and phone call-control endpoints for AI agents Affected versions of this package are vulnerable to Missing Authorization via the GET /api/agenticmail/tasks/pending and related task mutation endpoints. An attacker can...

@agenticmail/cli (>=0.5.57, <=0.8.36), agenticmail (>=0.3.0, <=0.5.56) potentially affected by CVE-2026-57494 via @agenticmail/api (>=0.3.3, <=0.7.21)

@agenticmail/api NPM version =0.3.3, =0.5.57, =0.3.0, =0.5.56 Source cves: CVE-2026-57494 Source advisory: SNYK:JS-AGENTICMAILAPI-17660542...

@agenticmail/cli (>=0.5.57, <=0.8.36), agenticmail (>=0.3.0, <=0.5.56) potentially affected by CVE-2026-57494 via @agenticmail/api (>=0.3.3, <=0.7.21)

@agenticmail/api NPM version =0.3.3, =0.5.57, =0.3.0, =0.5.56 Source cves: CVE-2026-57494 Source advisory: GHSA-HJWC-26PJ-V3PM...

@agenticmail/cli (>=0.5.57, <=0.8.36), agenticmail (>=0.3.0, <=0.5.56) potentially affected by CVE-2026-57494 via @agenticmail/api (>=0.3.3, <=0.7.21)

@agenticmail/api NPM version =0.3.3, =0.5.57, =0.3.0, =0.5.56 Source cves: CVE-2026-57494 Source advisory: OSV:GHSA-HJWC-26PJ-V3PM...

GHSA-HJWC-26PJ-V3PM AgenticMail: Cross-agent task authorization bypass in AgenticMail API

Summary A low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to GET /api/agenticmail/tasks/pending?assignee=. The returned task objects include the task IDs and payloads. The same task IDs can then be used with the...

PT-2026-61738

Name of the Vulnerable Software and Affected Versions @agenticmail/api versions prior to 0.9.64 Description A low-privileged authenticated agent can perform a cross-agent authorization bypass. By using the GET /api/agenticmail/accounts/directory endpoint, an attacker can discover agent names. The...

PT-2026-61739

Name of the Vulnerable Software and Affected Versions @agenticmail/claudecode versions prior to 0.2.39 @agenticmail/codex versions prior to 0.1.33 @agenticmail/core versions prior to 0.9.43 @agenticmail/openclaw versions prior to 0.5.71 Description Two inbound-mail handlers execute privileged...

CVE-2026-50287

AgenticMail gives AI agents real email addresses and phone numbers. Prior to version 0.9.27, @agenticmail/mcp exposes a Streamable HTTP transport when started with --http or MCPHTTP=1. In that mode, the /mcp endpoint accepts requests without any HTTP authentication layer. A remote client can...

@agenticmail/api (>=0.6.0, <=0.7.21), @agenticmail/claudecode (>=0.1.0, <=0.1.17) +1 more potentially affected by CVE-2026-50287 via @agenticmail/mcp (>=0.6.2, <=0.7.9)

@agenticmail/mcp NPM version =0.6.2, =0.6.0, =0.1.0, =0.6.0, =0.8.36 Source cves: CVE-2026-50287 Source advisory: MEND:CVE-2026-50287...

EUVD-2026-36544

AgenticMail gives AI agents real email addresses and phone numbers. Prior to version 0.9.27, @agenticmail/mcp exposes a Streamable HTTP transport when started with --http or MCPHTTP=1. In that mode, the /mcp endpoint accepts requests without any HTTP authentication layer. A remote client can...