Skip to content
OpenAdvisories

Package · npm

@agenticmail/api

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.1
    CVE-2026-57494

    AgenticMail: Cross-agent task authorization bypass in AgenticMail API

    AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to `GET /a…

    agenticmail @agenticmail/api @agenticmail/api npm
  • High 8.2
    CVE-2026-47255

    AgenticMail API/storage and outbound relay hardening

    AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to validation and and binding of inactive-agent hour filtering; storage SQL identif…

    agenticmail @agenticmail/core @agenticmail/api @agenticmail/core npm