Vulnerability · Published Jul 24, 2026 · Assigned by VulnCheck

CVE-2026-66027Suna < 0.9.102 Broken Access Control via Message Queue API

High 8.3

In plain English

A high-severity missing authorization in suna from kortix-ai. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).

Severity (CVSS 3.1)8.3High

Exploit odds (30 days)0.5%top 60.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.

Affected products (as reported)

Vendor	Product	Versions
kortix-ai	suna	0 – before 0.9.102

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

References

Researcher Disclosure technical-description, exploit
Suna 0.9.102 Release Notes release-notes, patch
Pull Request issue-tracking, patch
Patch Commit patch
https://www.vulncheck.com/advisories/suna-broken-access-control-via-message-queue-api third-party-advisory