Vulnerability · Published Oct 11, 2026 · Assigned by VulnCheck
CVE-2026-108756Abilityai Trinity through 0.9.5 Missing Authorization in Telegram Binding Routes
Medium 5.4
In plain English
A medium-severity missing authorization in trinity from Abilityai. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.2%top 87.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform human-only binding operations. Attackers controlling an agent, typically via prompt injection, can send messages through the owner's bot token, replace the binding with their own token, or delete it.
Affected products (as reported)
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
References
- https://hackmd.io/@haind/rJ2OBa8sfl third-party-advisory
- https://github.com/Abilityai/trinity/blob/e38c1c0f2567c602541c90c4c92152e99e6ead11/src/backend/routers/telegram.py#L168-L219 technical-description
- https://github.com/Abilityai/trinity/blob/e38c1c0f2567c602541c90c4c92152e99e6ead11/src/backend/routers/telegram.py#L258-L323 technical-description
- https://github.com/Abilityai/trinity product
- VulnCheck Advisory: Abilityai Trinity through 0.9.5 Missing Authorization in Telegram Binding Routes third-party-advisory