CVE-2026-108756: Missing Authorization in Abilityai trinity

CVE-2026-108756 describes a missing authorization vulnerability in Abilityai Trinity through version 0.9.5. The issue resides in the Telegram router, where agent-scoped MCP API keys are improperly authorized to perform human-only binding operations. Attackers who gain control over an agent—commonly via prompt injection—can misuse the owner's bot token to send messages, replace the binding with their own token, or delete the binding entirely. This vulnerability has a CVSS 4.0 base score of 5.3, indicating a medium severity level.

Exploitation of this vulnerability allows an attacker controlling an agent to send messages as the bot owner, replace the bot token binding with their own token, or delete the binding. This could lead to unauthorized message sending and potential disruption or takeover of bot operations. However, the vulnerability requires agent control and does not allow privilege escalation beyond the agent scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict agent control and avoid exposure to prompt injection attacks that could lead to agent compromise.