CVE-2026-66027 Suna < 0.9.102 Broken Access Control via Message Queue API
Authenticated attackers can access other users' queues and inject prompts into their AI agents due to missing ownership checks.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-66027?
CVE-2026-66027 is a high-severity missing authorization vulnerability in kortix-ai suna, published on 24 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.
Weakness: CWE-862
Which versions are affected by CVE-2026-66027?
How do I fix CVE-2026-66027?
No fix has been published for CVE-2026-66027 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-66027 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-66027 exists.
Sources
Also known as GHSA-59cg-fj2q-33c4.