CVE-2026-30968
CRITICALCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2Description
Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint (/sse/v1/...) in Coral Server did not strongly validate that a connecting agent was a legitimate participant in the session. This could theoretically allow unauthorized message injection or observation. This vulnerability is fixed in 1.1.0.
Analysis
Coral Server open collaboration platform has a missing authorization enabling unauthenticated access to all collaboration data.
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Inventory all deployments of Internet of Agents and identify affected versions; isolate affected systems from production environments if possible and restrict access to trust/payment functions. Within 7 days: Contact vendor for emergency patch timeline; implement network segmentation to limit exposure and deploy compensating controls; conduct forensic review for unauthorized access attempts. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today