CVE-2026-101079

Name of the Vulnerable Software and Affected Versions agentverus agentverus-scanner versions prior to 0.8.2

Description The isSecurityDefenseSkill() function within the dist/scanner/analyzers/context.js file relies on untrusted inputs when making security decisions. This issue allows a local attacker to perform a manipulation that compromises the security decision process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the isSecurityDefenseSkill() function.