agenticmail

Products

ProductCVEsExploitedLatest
@agenticmail/api2–Jul 20, 2026
@agenticmail/core2–Jul 20, 2026
agenticmail1–Jun 12, 2026
@agenticmail/claudecode1–Jul 20, 2026
@agenticmail/codex1–Jul 20, 2026
@agenticmail/openclaw1–Jul 20, 2026

Exploited and recent CVEs

  • CVE-2026-57495 High 8.2 AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake) 0.4%
  • CVE-2026-57495 High 8.2 AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake) 0.4%
  • CVE-2026-57495 High 8.2 AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake) 0.4%
  • CVE-2026-57495 High 8.2 AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake) 0.4%
  • CVE-2026-57494 High 7.1 AgenticMail: Cross-agent task authorization bypass in AgenticMail API 0.3%
  • CVE-2026-47255 High 8.2 AgenticMail API/storage and outbound relay hardening 0.3%
  • CVE-2026-47255 High 8.2 AgenticMail API/storage and outbound relay hardening 0.3%
  • CVE-2026-50287 High 8.7 Missing Authentication for Critical Function in @agenticmail/mcp 0.4%