CVE-2026-90811
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
In cosmicstack-labs mercury-agent up to 1.2.0, the PermissionManager.checkShellCommand function in mercury-agent/src/capabilities/permissions.ts (Shell Permission Manifest component) can lead to information disclosure via manipulation. The attack is restricted to local execution and the exploit is publicly available.
Risk Assessment
A local attacker could exploit the flaw to disclose sensitive information. The project has not responded to the report, so a fix may not be available.
Recommendation
Restrict local access to systems running mercury-agent and consider suspending use until a fix is released. Monitor for unusual shell permission function calls.
Other vulnerabilities in mercury-agent
See all- CVE-2026-90814Medium
A flaw exists in cosmicstack-labs mercury-agent up to 1.1.13 in the githubRequest function of src/utils/github.ts (GitHub API Handler component). Manipulating the path argument causes server-side request forgery, and the exploit has been publicly disclosed.
- CVE-2026-90813Medium
A vulnerability exists in cosmicstack-labs mercury-agent up to 1.1.13 in the checkShellCommand function of src/capabilities/permissions.ts (Shell Command Execution component). The flaw is an incorrect behavior order: validate before canonicalize, and the exploit is publicly available.
- CVE-2026-18998Medium
A vulnerability in cosmicstack-labs mercury-agent up to 1.1.12 affects the function SubAgent.run in src/core/sub-agent.ts, causing improper authorization. Remote attack is possible and exploit is public.
- CVE-2026-18997Medium
A vulnerability in cosmicstack-labs mercury-agent up to 1.1.12 affects the function Agent.handleBgCommand in src/core/agent.ts, causing incorrect authorization. Remote attack is possible and exploit is public.
- CVE-2026-18996Medium
A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12, affecting the function PermissionManager.checkShellCommand in the file src/capabilities/permissions.ts in the run_command Handler component. Such manipulation leads to incorrect privilege assignment. The attack may be performed remotely, and the exploit has been publicly disclosed.
Original NVD description (English source)
A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell Permission Manifest. Executing a manipulation can lead to information disclosure. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS