CVE-2026-66027highCWE-862

CVE-2026-66027: high-severity vulnerability in kortix-ai suna

Suna < 0.9.102 Broken Access Control via Message Queue API

Published · Updated

Follow this CVE+ Monitor suna

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 8.7epss 0.5%
Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Affected products
kortix-ai · suna
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — kortix-ai suna

In the same product, most dangerous first.

CVE-2026-12811MEDIUMkortix-ai suna Auth Endpoint page.tsx router.push cross site scriptingEPSS 0.5%CVE-2026-108115LOWKortix Suna 0.10.7 before 0.13.52 SSRF Guard Bypass via IPv6 6to4 AddressesEPSS 0.2%