Vulnerability Description
Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/geo-chen/oss/blob/main/suna.md
- https://github.com/kortix-ai/suna/commit/7536a7d47fc93abcb66e677fcc993b390c81296
- https://github.com/kortix-ai/suna/pull/4373
- https://github.com/kortix-ai/suna/releases/tag/v0.9.102
- https://www.vulncheck.com/advisories/suna-broken-access-control-via-message-queu
FAQ
What is CVE-2026-66027?
CVE-2026-66027 is a vulnerability with a CVSS score of 8.3 (HIGH). Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exp...
How severe is CVE-2026-66027?
CVE-2026-66027 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-66027?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.