CVE-2026-84779: CWE-862 Missing Authorization in Sheikh Heera Agentimus – AI SEO, llms.txt & MCP for AI Agents

This vulnerability, identified as CWE-862 (Missing Authorization), affects Sheikh Heera's Agentimus – AI SEO, llms.txt & MCP for AI Agents in versions up to 1.51.0. It allows an attacker with low privileges to bypass authorization controls over the network, resulting in high impact on confidentiality and integrity. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and unchanged scope. No vendor advisory or patch information is currently available.

Successful exploitation can lead to unauthorized access to sensitive information or unauthorized modification of data within the affected application, compromising confidentiality and integrity. Availability is not impacted. The vulnerability requires low privileges and no user interaction, making it a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application to trusted users only and monitor for suspicious activity related to authorization bypass attempts.