CVE-2026-91988criticalCWE-319

CVE-2026-91988: critical vulnerability in dep0we atomic-agents-stack

atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCP

Published

Follow this CVE+ Monitor atomic-agents-stack+ Monitor atomic-agents-stack

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.2epss 0.3%
atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog responses. Attackers can inject arbitrary command and argument values that are spawned as local subprocesses by MCPClientPool to achieve code execution on the agent host.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
dep0we · atomic-agents-stack
Related CVEs — dep0we atomic-agents-stack

In the same product, most dangerous first.

CVE-2026-91989HIGHatomic-agents-stack before 1.1.0 Path Traversal via dashboard serve.pyEPSS 1.3%CVE-2026-91987HIGHatomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown ModelEPSS 0.5%