CVE-2026-19010
Received Received - Intake

Missing Authorization in TinyAGI Message API Endpoint

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulDB

Description
A security vulnerability has been detected in TinyAGI 0.0.20. Impacted is the function processMessage of the file packages/main/src/index.ts of the component Message API Endpoint. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-19010
EUVD
EUVD-2026-53769

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
tinyagi tinyagi From 0.0.21 (exc)
tinyagi tinyagi From 0.0.10 (inc) to 0.0.21 (exc)
tinyagi tinyagi 0.0.20

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-19010 is a security flaw in TinyAGI 0.0.20 where the processMessage function in packages/main/src/index.ts lacks proper authorization checks. This allows remote attackers to bypass permission controls by sending crafted messages to the Message API Endpoint. The vulnerability exists because the system forwards messages directly to the Anthropic Claude model without verifying user permissions.

Detection Guidance
  • Check if TinyAGI is running on your system by inspecting running processes for node or tinyagi.
  • Verify the installed version of TinyAGI by checking package.json or running npm list tinyagi.
  • Inspect network traffic for POST requests to /api/message endpoints on your system.
  • Review logs for unauthorized access attempts or suspicious API calls to the message endpoint.
  • Use curl to test the endpoint: curl -X POST http://localhost:PORT/api/message -H 'Content-Type: application/json' -d '{"message":"test"}'
Impact Analysis

This vulnerability enables unauthenticated attackers to execute high-risk operations through the API. They could gain unauthorized access to local files, run arbitrary commands, or activate plugins without proper approval. The default use of the --dangerously-skip-permissions flag in Claude CLI subprocesses exacerbates the risk by disabling built-in safety mechanisms.

Compliance Impact

This vulnerability likely violates compliance requirements for GDPR and HIPAA due to unauthorized access risks. GDPR mandates strict data access controls, while HIPAA requires protection of sensitive health information. The flaw allows bypassing authorization, potentially exposing personal or health data without consent, leading to regulatory penalties and legal consequences.

Mitigation Strategies
  • Upgrade TinyAGI to version 0.0.21 or later immediately to patch the vulnerability.
  • Disable the /api/message endpoint if not required, or restrict access via firewall rules.
  • Review and remove the --dangerously-skip-permissions flag from any Claude CLI subprocess configurations.
  • Implement network segmentation to limit access to the TinyAGI API endpoints.
  • Monitor for unusual activity or unauthorized access attempts to the message API.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19010. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart