CVE-2026-66027
Suna < 0.9.102 Broken Access Control via Message Queue API
CVSS Score
8.3
EPSS Score
0.0%
EPSS Percentile
0th
Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.
| CWE | CWE-862 |
| Vendor | kortix-ai |
| Product | suna |
| Published | Jul 24, 2026 |
| Last Updated | Jul 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for kortix-ai suna
Be the first to know when new high vulnerabilities affecting kortix-ai suna are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
Low
Affected Versions
kortix-ai / suna
0 < 0.9.102
References
github.com: https://github.com/geo-chen/oss/blob/main/suna.md github.com: https://github.com/kortix-ai/suna/releases/tag/v0.9.102 github.com: https://github.com/kortix-ai/suna/pull/4373 github.com: https://github.com/kortix-ai/suna/commit/7536a7d47fc93abcb66e677fcc993b390c81296a vulncheck.com: https://www.vulncheck.com/advisories/suna-broken-access-control-via-message-queue-api
Credits
George Chen