CVE-2026-90814
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A flaw exists in cosmicstack-labs mercury-agent up to 1.1.13 in the githubRequest function of src/utils/github.ts (GitHub API Handler component). Manipulating the path argument causes server-side request forgery, and the exploit has been publicly disclosed.
Risk Assessment
A remote attacker can force the server to make requests to arbitrary internal resources, potentially leading to data disclosure or access to internal services.
Recommendation
Report the issue to the project (no response to the issue report yet) and consider implementing your own validation restrictions on the path argument until a fix is released.
Other vulnerabilities in mercury-agent
See all- CVE-2026-90813Medium
A vulnerability exists in cosmicstack-labs mercury-agent up to 1.1.13 in the checkShellCommand function of src/capabilities/permissions.ts (Shell Command Execution component). The flaw is an incorrect behavior order: validate before canonicalize, and the exploit is publicly available.
- CVE-2026-90811Low
In cosmicstack-labs mercury-agent up to 1.2.0, the PermissionManager.checkShellCommand function in mercury-agent/src/capabilities/permissions.ts (Shell Permission Manifest component) can lead to information disclosure via manipulation. The attack is restricted to local execution and the exploit is publicly available.
- CVE-2026-18998Medium
A vulnerability in cosmicstack-labs mercury-agent up to 1.1.12 affects the function SubAgent.run in src/core/sub-agent.ts, causing improper authorization. Remote attack is possible and exploit is public.
- CVE-2026-18997Medium
A vulnerability in cosmicstack-labs mercury-agent up to 1.1.12 affects the function Agent.handleBgCommand in src/core/agent.ts, causing incorrect authorization. Remote attack is possible and exploit is public.
- CVE-2026-18996Medium
A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12, affecting the function PermissionManager.checkShellCommand in the file src/capabilities/permissions.ts in the run_command Handler component. Such manipulation leads to incorrect privilege assignment. The attack may be performed remotely, and the exploit has been publicly disclosed.
Original NVD description (English source)
A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github.ts of the component GitHub API Handler. This manipulation of the argument path causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS