CVE-2026-66027

Name of the Vulnerable Software and Affected Versions Suna versions prior to 0.9.102

Description Broken access control in the message queue API allows authenticated attackers to access and manipulate queue resources of other users due to missing ownership and account isolation checks. This allows attackers to read pending prompt queues for all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue. Consequently, the background drainer may forward malicious messages to the victim's active AI agent using the victim's credentials and permissions.

Recommendations Update Suna to version 0.9.102 or later.