CVE-2026-18998
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A vulnerability in cosmicstack-labs mercury-agent up to 1.1.12 affects the function SubAgent.run in src/core/sub-agent.ts, causing improper authorization. Remote attack is possible and exploit is public.
Risk Assessment
Improper authorization could allow an attacker to perform unauthorized operations, potentially compromising system security. Public exploit increases risk.
Recommendation
Urgently update mercury-agent to a patched version and monitor for unauthorized activities.
Other vulnerabilities in mercury-agent
See all- CVE-2026-18997Medium
A vulnerability in cosmicstack-labs mercury-agent up to 1.1.12 affects the function Agent.handleBgCommand in src/core/agent.ts, causing incorrect authorization. Remote attack is possible and exploit is public.
- CVE-2026-18996Medium
A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12, affecting the function PermissionManager.checkShellCommand in the file src/capabilities/permissions.ts in the run_command Handler component. Such manipulation leads to incorrect privilege assignment. The attack may be performed remotely, and the exploit has been publicly disclosed.
Original NVD description (English source)
A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12. Impacted is the function SubAgent.run of the file src/core/sub-agent.ts of the component delegate_task Tool. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.