PT-2026-24340 · Unknown · Coral-Server

Highseafraf · CVE-2026-30969 · Published 2026-03-10 · Updated 2026-03-16

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Coral Server versions prior to 1.1.0

Description Coral Server, an open collaboration infrastructure for The Internet of Agents, did not enforce strong authentication between agents and the server during active sessions. This could allow an attacker who obtains or predicts a session identifier to impersonate an agent or join an existing session.

Recommendations Update to version 1.1.0 or later.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-30969

GHSA-CCX7-7WV9-C55X

Affected Products

Coral-Server

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30969.json · Exploit
• https://github.com/Coral-Protocol/coral-server/security/advisories/GHSA-ccx7-7wv9-c55x · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-30969 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-30969 · Security Note
• https://github.com/Coral-Protocol/coral-server/releases/tag/v1.1.0 · Note
• https://twitter.com/CVEnew/status/2033361105645387907 · Twitter Post