CVE-2026-47255

Received Received - Intake

Authentication Bypass in AgenticMail API and Core

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: GitHub, Inc.

Description

AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to validation and and binding of inactive-agent hour filtering; storage SQL identifier validation; metadata-backed ownership checks for raw storage SQL; blocking direct storage metadata access through raw SQL; fail-closed outbound worker secret handling; SMTP envelope/header control-character validation before command construction; and TLS certificate verification as the default for MailSender with an explicit opt-out for local development. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 are patched.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-20

Last Modified

2026-07-20

Generated

2026-07-21

AI Q&A

2026-07-21

EPSS Evaluated

N/A

NVD

CVE-2026-47255

Affected Vendors & Products

Vendor	Product	Version / Range
agenticmail	api	to 0.9.32 (exc)
agenticmail	core	to 0.9.10 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-89	The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.
CWE-319	The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

AgenticMail provides AI agents with email addresses and phone numbers. Versions of @agenticmail/api before 0.9.32 and @agenticmail/core before 0.9.10 have multiple weaknesses related to validation, security controls, and improper handling of inactive agents, storage identifiers, and TLS certificates.

Impact Analysis

This vulnerability could allow unauthorized access to storage, manipulation of email metadata, bypassing of security controls, or exposure of sensitive data due to improper validation and weak security defaults in email handling.

Compliance Impact

The vulnerability may lead to unauthorized data access or manipulation, which could violate GDPR's data protection requirements or HIPAA's safeguards for protected health information, potentially resulting in legal and regulatory penalties.

Mitigation Strategies

Update @agenticmail/api to version 0.9.32 or later and @agenticmail/core to version 0.9.10 or later to address the identified weaknesses.

Hi! I’m here to help you understand CVE-2026-47255. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70