CVE-2026-103090

Name of the Vulnerable Software and Affected Versions Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through 0.1.0-alpha.8

Description Missing authentication and insufficiently protected credentials in the control plane enrollment status handler HandleEnrollStatus() at the 'GET /enroll/status' endpoint allow an unauthenticated remote attacker to retrieve a signed Biscuit identity token of an approved bootstrap-enrolled peer by providing a peer id obtained from the 'GET /info' endpoint. Additionally, a flaw in the 'POST /enroll' endpoint allows any holder of a bootstrap token to re-fetch credentials of another peer. An attacker can use the disclosed Biscuit token as a bearer credential to read mesh authorization policies via the '/policies' endpoint or overwrite advertised router multiaddrs via the '/routers/lease' endpoint.

Recommendations Upgrade to version 0.1.0-alpha.9 or later.