CVE-2026-66027: Missing Authorization in kortix-ai suna
Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.
AI Analysis
Technical Summary
CVE-2026-66027 describes a broken access control vulnerability in kortix-ai's suna product prior to version 0.9.102. The message queue API lacks proper ownership and account isolation checks, allowing authenticated users to access and manipulate other users' queue resources. Attackers can read pending prompts, delete sessions, and inject malicious prompts into other users' session queues, resulting in the victim's AI agent executing these prompts with the victim's privileges. This vulnerability has a high CVSS 4.0 score of 8.7, indicating significant impact if exploited.
Potential Impact
Exploitation allows authenticated attackers to read and delete other users' session data and inject arbitrary prompts into their session queues. This can lead to unauthorized actions performed by the victim's AI agent under the victim's credentials and permissions, potentially compromising data integrity and confidentiality within the affected system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time.
CVE-2026-66027: Missing Authorization in kortix-ai suna
Description
Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.
CVSS v4.0
Score 8.7high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-66027 describes a broken access control vulnerability in kortix-ai's suna product prior to version 0.9.102. The message queue API lacks proper ownership and account isolation checks, allowing authenticated users to access and manipulate other users' queue resources. Attackers can read pending prompts, delete sessions, and inject malicious prompts into other users' session queues, resulting in the victim's AI agent executing these prompts with the victim's privileges. This vulnerability has a high CVSS 4.0 score of 8.7, indicating significant impact if exploited.
Potential Impact
Exploitation allows authenticated attackers to read and delete other users' session data and inject arbitrary prompts into their session queues. This can lead to unauthorized actions performed by the victim's AI agent under the victim's credentials and permissions, potentially compromising data integrity and confidentiality within the affected system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-07-23T20:45:17.816Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a638a5d9c2644c7f82fb854
Added to database: 07/24/2026, 15:53:01 UTC
Last enriched: 07/24/2026, 16:07:15 UTC
Last updated: 07/24/2026, 18:25:11 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.