What is the CVSS score of CVE-2026-30969?

CVE-2026-30969 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-30969?

A critical authorization bypass vulnerability in Internet of Agents (versions ≤1.1.0) allows attackers to manipulate user-controlled keys to bypass payment and trust controls, potentially enabling…

How to fix or mitigate CVE-2026-30969?

Within 24 hours: Identify all systems running Internet of Agents versions 1.1.0 or earlier and isolate them from production payment/transaction systems; notify affected stakeholders. Within 7 days: Implement compensating controls including strict key validation, enhanced logging/monitoring, and network segmentation; conduct audit of recent transactions for unauthorized access. Within 30 days: Contact vendor for patch timeline; evaluate alternative solutions; perform forensic analysis if compromise is suspected.

AI / ML CVE-2026-30969

CRITICAL

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-03-10 security-advisories@github.com

Authentication Bypass AI / ML Coral Server

9.1

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:18 nvd

CRITICAL 9.1

DescriptionGitHub Advisory

Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, Coral Server did not enforce strong authentication between agents and the server within an active session. This could allow an attacker who obtained or predicted a session identifier to impersonate an agent or join an existing session. This vulnerability is fixed in 1.1.0.