The vulnerability in atomic-agents-stack versions prior to 1.1.0 arises from the _estimate_batch_cost function returning zero cost for unknown models that are not present in the pricing table. This flaw enables attackers with limited privileges to deploy unknown model identifiers in batch operations, effectively bypassing the daily cost caps and exceeding budget limits without triggering cost controls. The issue is a resource allocation without limits or throttling, leading to potential financial impact due to uncontrolled resource consumption.

Attackers can exploit this vulnerability to bypass daily cost caps and exceed budget limits by deploying unknown model identifiers in parallel batch operations. This can result in unexpected and potentially significant resource usage and associated costs. There is no indication of direct compromise of confidentiality, integrity, or availability of the system beyond the financial/resource impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid deploying unknown model identifiers not listed in the pricing table to prevent bypassing cost controls.