What’s Vulnerable › Products

cosmicstack-labs mercury-agent vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your cosmicstack-labs mercury-agent version is affected

Latest cosmicstack-labs mercury-agent vulnerabilities

• CVE-2026-90814 — cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery (CVSS 6.3)
• CVE-2026-90813 — cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize (CVSS 4.3)
• CVE-2026-90812 — cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment (CVSS 4.3)
• CVE-2026-90811 — cosmicstack-labs mercury-agent Shell Permission Manifest permissions.ts PermissionManager.checkShellCommand information disclosure (CVSS 3.3)
• CVE-2026-90810 — cosmicstack-labs mercury-agent Shell Command Permission Check permissions.ts PermissionManager.checkShellCommand improper authorization (CVSS 6.3)
• CVE-2026-18998 — cosmicstack-labs mercury-agent delegate_task Tool sub-agent.ts SubAgent.run improper authorization (CVSS 6.3)
• CVE-2026-18997 — cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization (CVSS 6.3)
• CVE-2026-18996 — cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignment (CVSS 6.3)