What’s Vulnerable › Vulnerabilities

CVE-2026-108756: Abilityai Trinity through 0.9.5 Missing Authorization in Telegram Binding Routes

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-11 · updated 2026-10-16
• Weakness: CWE-862

Description

Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform human-only binding operations. Attackers controlling an agent, typically via prompt injection, can send messages through the owner's bot token, replace the binding with their own token, or delete it.

Affected products

• Abilityai trinity: through 0.9.5

References

• https://github.com/Abilityai/trinity
• https://github.com/Abilityai/trinity/blob/e38c1c0f2567c602541c90c4c92152e99e6ead11/src/backend/routers/telegram.py#L168-L219
• https://github.com/Abilityai/trinity/blob/e38c1c0f2567c602541c90c4c92152e99e6ead11/src/backend/routers/telegram.py#L258-L323
• https://hackmd.io/@haind/rJ2OBa8sfl
• https://www.vulncheck.com/advisories/abilityai-trinity-through-0.9.5-missing-authorization-in-telegram-binding-routes

Get alerted when CVE-2026-108756 or the next vulnerability affects your stack