Cross-agent authorization bypass in AgenticMail API (CVE-2026-57494)

A low-privileged authenticated AgenticMail agent can enumerate another agent's pending and claimed tasks by supplying the target agent name to `GET /api/agenticmail/tasks/pending?assignee=<name>`, disclosing task IDs and payloads. The disclosed task IDs can then be used with the capability-style mutation endpoints (`/tasks/:id/claim`, `/tasks/:id/result`, `/tasks/:id/complete`, `/tasks/:id/fail`) to claim, complete, or fail tasks assigned to a different agent without authorization. Because agent names are discoverable through `GET /api/agenticmail/accounts/directory`, this undermines the intended capability model, enabling disclosure of confidential task contents and compromise of workflow integrity in multi-agent deployments. Affected versions: - < 0.9.64 We recommend updating to: 0.9.64. CVSS 7.1 · our assessment: this_week Reference: https://github.com/agenticmail/agenticmail/security/advisories/GHSA-hjwc-26pj-v3pm Details: https://vuln.today/cve/CVE-2026-57494