PT-2026-64372 · Kortix Ai · Suna

George Chen · CVE-2026-66027 · Publicado 2026-07-24 · Atualizado 2026-07-24

NVD

CVSS v3.1

8.3

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.

Exploit

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-66027

Produtos afetados

Suna

Referências · 6

• 🔥 https://github.com/geo-chen/oss/blob/main/suna.md · Exploit
• https://github.com/kortix-ai/suna/commit/7536a7d47fc93abcb66e677fcc993b390c81296a · Correção
• https://github.com/kortix-ai/suna/releases/tag/v0.9.102 · Nota
• https://github.com/kortix-ai/suna/pull/4373 · Nota
• https://vulncheck.com/advisories/suna-broken-access-control-via-message-queue-api · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-66027 · Nota de Segurança