This vulnerability in agenticmail's API and core components arises from multiple improper input validation issues and security control weaknesses. Specifically, it affects validation and binding of inactive-agent hour filtering, SQL identifier validation for storage, ownership checks for raw storage SQL metadata, blocking direct access to storage metadata via raw SQL, fail-closed handling of outbound worker secrets, validation of SMTP envelope and header control characters before command construction, and enforcement of TLS certificate verification by default in MailSender. Versions prior to 0.9.32 (@agenticmail/api) and 0.9.10 (@agenticmail/core) are affected. The vulnerability is tracked as CVE-2026-47255 with a CVSS 3.1 score of 8.2 (high severity).

The vulnerability allows attackers to exploit improper input validation and bypass certain security controls, potentially leading to integrity violations (e.g., unauthorized modification or injection) and partial denial of service conditions. Confidentiality impact is not indicated. There are no known exploits in the wild as of the published date.

The vulnerability has been addressed by patches in @agenticmail/api version 0.9.32 and @agenticmail/core version 0.9.10. Users should upgrade to these versions or later to remediate the issue. No additional mitigation steps are indicated.