CVE-2026-108756

Name of the Vulnerable Software and Affected Versions Abilityai Trinity versions prior to 0.9.6

Description A missing authorization issue exists in the Telegram router. This allows agent-scoped MCP API keys to execute binding operations that should be restricted to humans. An attacker who gains control of an agent, often through prompt injection, can send messages using the owner's bot token, replace the existing binding with their own token, or delete the binding.

Recommendations Update Abilityai Trinity to version 0.9.6 or later.