CVE-2026-51914

Summary

The flaw allows an attacker to bypass access controls and manipulate agent templates, potentially leading to unauthorized access or data manipulation within the system.

Exploitability

Exploitation is relatively straightforward as it requires an attacker to supply an agent_id or agent_execution_id that belongs to another user's organization, which can be achieved through social engineering or by exploiting other vulnerabilities to gain access to the required IDs.

Blast radius

If exploited, the impact could be severe, as it could lead to unauthorized access to sensitive agent templates, potentially allowing an attacker to modify or delete critical configurations.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the fixed version 0.0.14 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.