This vulnerability in cosmicstack-labs mercury-agent (versions 1.1.0 through 1.1.12) involves improper authorization in the SubAgent.run function of the src/core/sub-agent.ts file within the delegate_task Tool component. An attacker can remotely exploit this flaw to bypass authorization controls. The issue was reported early to the project, but no remediation or patch has been provided. The CVSS 4.0 base score is 5.3, indicating medium severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed.

Successful exploitation allows remote attackers to perform actions without proper authorization, potentially leading to unauthorized task delegation or execution within the mercury-agent environment. The impact is limited to the scope of the affected function and the privileges it controls. No known active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. Until a patch is available, consider restricting network access to the mercury-agent service to trusted sources to reduce exposure.