CVEvulnerability
CVE-2026-66027
8.7 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2026-07-24
- Last modified
- 2026-10-24
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.7 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 8.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
- Weaknesses
- CWE-862
Description
Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://github.com/geo-chen/oss/blob/main/suna.md github.com
- https://github.com/kortix-ai/suna/commit/7536a7d47fc93abcb66e677fcc993b390c81296a github.com
- https://github.com/kortix-ai/suna/pull/4373 github.com
- https://github.com/kortix-ai/suna/releases/tag/v0.9.102 github.com
- https://www.vulncheck.com/advisories/suna-broken-access-control-via-message-queue-api www.vulncheck.com