CVE-2026-51867

Name of the Vulnerable Software and Affected Versions agentgpt version 1.0.0

Description Incorrect Access Control exists in the file next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and performs a data-access operation without verifying the owner, tenant, workspace, or membership binding associated with that object.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.