What’s Vulnerable › Vulnerabilities

CVE-2026-66027: Suna < 0.9.102 Broken Access Control via Message Queue API

• Severity: high (CVSS 8.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-24 · updated 2026-10-24
• Weakness: CWE-862

Description

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.

Affected products

• kortix-ai suna: before 0.9.102 — fixed in 0.9.102

How to fix

Upgrade to a fixed version: kortix-ai suna 0.9.102. Check the vendor advisory for mitigations.

References

• https://github.com/geo-chen/oss/blob/main/suna.md
• https://github.com/kortix-ai/suna/commit/7536a7d47fc93abcb66e677fcc993b390c81296a
• https://github.com/kortix-ai/suna/pull/4373
• https://github.com/kortix-ai/suna/releases/tag/v0.9.102
• https://www.vulncheck.com/advisories/suna-broken-access-control-via-message-queue-api

Get alerted when CVE-2026-66027 or the next vulnerability affects your stack