Vulnerability details

CVE-2026-66027

kortix-ai suna

Suna < 0.9.102 Broken Access Control via Message Queue API

CVSS 4.0

8.7High

Official description

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.

CVSS scores

Score	Version	Source	Vector
8.7High	4.0	CVEProject cvelistV5 (CNA) (VulnCheck)	`CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N`
8.3High	3.1	CVEProject cvelistV5 (CNA) (VulnCheck)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L`

Affected products

Vendor	Product	Versions	Source
kortix-ai	suna	v < 0.9.102	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/geo-chen/oss/blob/main/suna.md technical-descriptionexploit
https://github.com/kortix-ai/suna/releases/tag/v0.9.102 release-notespatch
https://github.com/kortix-ai/suna/pull/4373 issue-trackingpatch
https://github.com/kortix-ai/suna/commit/7536a7d47fc93abcb66e677fcc993b390c81296a patch
https://www.vulncheck.com/advisories/suna-broken-access-control-via-message-queue-api third-party-advisory

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-07-24
Last updated: 2026-07-25
State: Published
Assigner (CNA): VulnCheck

Exploit prediction (EPSS)

0.45%

Probability of exploitation in 30 days

39.7%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: Proof of concept
Technical impact: Total

Weaknesses (CWE)

CWE-862
Missing Authorization