CVE-2026-66027 | BDVDB-2026-352364 Detail
kortix-aisuna
Description#
Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact low. Attack vector: network.
Weaknesses#
- CWE-862 Missing Authorization
References#
- https://github.com/geo-chen/oss/blob/main/suna.md
- https://github.com/kortix-ai/suna/releases/tag/v0.9.102
- https://github.com/kortix-ai/suna/pull/4373
- https://github.com/kortix-ai/suna/commit/7536a7d47fc93abcb66e677fcc993b390c81296a
- https://www.vulncheck.com/advisories/suna-broken-access-control-via-message-queue-api
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.