CVE-2026-108756 Details
Description
Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform human-only binding operations. Attackers controlling an agent, typically via prompt injection, can send messages through the owner's bot token, replace the binding with their own token, or delete it.
A missing authorization vulnerability has been identified in AbilityAI Trinity versions through 0.9.5. This vulnerability resides in the Telegram integration router, where agent-scoped MCP API keys can execute human-only binding operations. Typically, an attacker could exploit this by taking control of an agent, often through prompt injection, and then send messages using the owner's bot token, replace the existing binding with their own token, or delete the binding altogether.
The vulnerability can be fixed by adding the missing authorization checks to the affected Telegram routes. This involves incorporating the 'reject_agent_principal' guard to the 'configure', 'delete', and 'test/send' routes, ensuring they align with the intended owner-only access policy.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 11, 2026CISA-ADP
Assessed Oct 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Abilityai Trinity | <= 0.9.5 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 13, 2026 | CVE Modified | CISA-ADP |
| Oct 11, 2026 | New CVE Received | [email protected] |