Threats tagged 'ghsa-ccg4-hv3q-9622'

CVE-2026-18996 is a vulnerability in cosmicstack-labs mercury-agent versions up to 1.1.12. It affects the PermissionManager.checkShellCommand function in the run_command handler, leading to incorrect privilege assignment. The vulnerability can be exploited remotely. Public exploit code has been disclosed, but the vendor has not yet responded or issued a patch. The CVSS score is 6.3, indicating a medium severity risk.