Skip to content
OpenAdvisories

Product · crestalnetwork

intentkit

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-76066

    IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode

    IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, …

    crestalnetwork intentkit