Skip to content
OpenAdvisories

Vendor

Coral-Protocol

3 known vulnerabilities.

Products

coral-server 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-30970

    Session authentication bypass in Coral Server session creation endpoint

    Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, Coral Server allowed the creation of agent sessions through the /api/v1/sessions endpoint without strong…

    Coral-Protocol coral-server
  • High 7.6
    CVE-2026-30969

    Coral Server has insufficient agent authentication in session communication channels

    Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, Coral Server did not enforce strong authentication between agents and the server within an active sessio…

    Coral-Protocol coral-server
  • High 8.6
    CVE-2026-30968

    Coral Server has insufficient validation of agent identity for SSE connections

    Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint (/sse/v1/...) in Coral Server did not strongly validate that a connecting agent was a l…

    Coral-Protocol coral-server