CVE-2026-57494

Name of the Vulnerable Software and Affected Versions @agenticmail/api versions prior to 0.9.64

Description A low-privileged authenticated agent can perform a cross-agent authorization bypass. By using the GET /api/agenticmail/accounts/directory endpoint, an attacker can discover agent names. These names can then be supplied to the GET /api/agenticmail/tasks/pending endpoint via the assignee parameter to enumerate another agent's pending or claimed tasks, exposing task IDs and payloads. These task IDs can be further used with the following mutation endpoints to claim, complete, or fail tasks assigned to different agents: /tasks/:id/claim, /tasks/:id/result, /tasks/:id/complete, and /tasks/:id/fail.

Recommendations Update @agenticmail/api to version 0.9.64.