CVE-2026-66027 Details

A broken access control vulnerability has been identified in Suna versions prior to 0.9.102. This vulnerability allows authenticated users to access and manipulate message queue resources belonging to other users. The issue arises from a lack of proper ownership and account isolation checks in the message queue API. Exploitation of this vulnerability enables attackers to read the pending prompt queues of all users, access or delete individual session data, and inject arbitrary prompts into another user's session queue. Such injected prompts are forwarded to the victim's AI agent, using the victim's credentials and permissions, potentially leading to unauthorized actions or information disclosure.

Users can update to Suna version 0.9.102 or later, where this vulnerability has been addressed.