CVE-2026-18996
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12, affecting the function PermissionManager.checkShellCommand in the file src/capabilities/permissions.ts in the run_command Handler component. Such manipulation leads to incorrect privilege assignment. The attack may be performed remotely, and the exploit has been publicly disclosed.
Risk Assessment
An attacker can gain higher privileges than intended, potentially leading to unauthorized execution of system commands or privilege escalation.
Recommendation
Update mercury-agent to the latest patched version. Review the permission checking logic and restrict access to the checkShellCommand function.
Other vulnerabilities in mercury-agent
See all- CVE-2026-18998Medium
A vulnerability in cosmicstack-labs mercury-agent up to 1.1.12 affects the function SubAgent.run in src/core/sub-agent.ts, causing improper authorization. Remote attack is possible and exploit is public.
- CVE-2026-18997Medium
A vulnerability in cosmicstack-labs mercury-agent up to 1.1.12 affects the function Agent.handleBgCommand in src/core/agent.ts, causing incorrect authorization. Remote attack is possible and exploit is public.
Original NVD description (English source)
A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12. This vulnerability affects the function PermissionManager.checkShellCommand of the file src/capabilities/permissions.ts of the component run_command Handler. Such manipulation leads to incorrect privilege assignment. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.