CVE-2026-18998
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A vulnerability in cosmicstack-labs mercury-agent up to 1.1.12 affects the function SubAgent.run in src/core/sub-agent.ts, causing improper authorization. Remote attack is possible and exploit is public.
Risk Assessment
Improper authorization could allow an attacker to perform unauthorized operations, potentially compromising system security. Public exploit increases risk.
Recommendation
Urgently update mercury-agent to a patched version and monitor for unauthorized activities.
Other vulnerabilities in mercury-agent
See all- CVE-2026-90814Medium
A flaw exists in cosmicstack-labs mercury-agent up to 1.1.13 in the githubRequest function of src/utils/github.ts (GitHub API Handler component). Manipulating the path argument causes server-side request forgery, and the exploit has been publicly disclosed.
- CVE-2026-90813Medium
A vulnerability exists in cosmicstack-labs mercury-agent up to 1.1.13 in the checkShellCommand function of src/capabilities/permissions.ts (Shell Command Execution component). The flaw is an incorrect behavior order: validate before canonicalize, and the exploit is publicly available.
- CVE-2026-90811Low
In cosmicstack-labs mercury-agent up to 1.2.0, the PermissionManager.checkShellCommand function in mercury-agent/src/capabilities/permissions.ts (Shell Permission Manifest component) can lead to information disclosure via manipulation. The attack is restricted to local execution and the exploit is publicly available.
- CVE-2026-18997Medium
A vulnerability in cosmicstack-labs mercury-agent up to 1.1.12 affects the function Agent.handleBgCommand in src/core/agent.ts, causing incorrect authorization. Remote attack is possible and exploit is public.
- CVE-2026-18996Medium
A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12, affecting the function PermissionManager.checkShellCommand in the file src/capabilities/permissions.ts in the run_command Handler component. Such manipulation leads to incorrect privilege assignment. The attack may be performed remotely, and the exploit has been publicly disclosed.
Original NVD description (English source)
A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12. Impacted is the function SubAgent.run of the file src/core/sub-agent.ts of the component delegate_task Tool. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS