What is the CVSS score of CVE-2026-47255?

CVE-2026-47255 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2026-47255?

Within 24 hours: Identify all production systems and non-production environments using @agenticmail/api (version ≤0.9.31) or @agenticmail/core (version ≤0.9.9) and document which customer tenants are affected. Within 7 days: Upgrade both packages to the latest patched versions as specified in the vendor advisory; retest tenant isolation and SMTP functionality before returning to production. Within 30 days: Audit access logs and query patterns from the vulnerability window to detect any cross-tenant data access; review email audit logs for SMTP header injection attempts; document findings for compliance reporting.

CVE-2026-47255

HIGH

Improper Input Validation (CWE-20)

2026-05-29 https://github.com/agenticmail/agenticmail

GHSA-wjjv-3mj2-39hf

Information Disclosure

8.2

CVSS 3.1 · Vendor: https://github.com/agenticmail/agenticmail

Severity by source

Vendor (https://github.com/agenticmail/agenticmail) PRIMARY

8.2 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Primary rating from Vendor (https://github.com/agenticmail/agenticmail) · only source for this CVE.

CVSS VectorVendor: https://github.com/agenticmail/agenticmail

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Updated

Jul 20, 2026 - 22:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jul 20, 2026 - 22:22 vuln.today

cvss_changed

CVSS changed

Jul 20, 2026 - 22:22 NVD

8.2 (HIGH)

Source Code Evidence Fetched

May 29, 2026 - 19:46 vuln.today

Analysis Generated

May 29, 2026 - 19:46 vuln.today

DescriptionCVE.org

The current upstream main branch at commit 7e0206d was reviewed, and the fix-first patch set was rebased on 2026-05-18. The patches cover: validated and bound inactive-agent hour filtering; storage SQL identifier validation; metadata-backed ownership checks for raw storage SQL; blocking direct storage metadata access through raw SQL; fail-closed outbound worker secret handling; SMTP envelope/header control-character validation before command construction; and TLS certificate verification as the default for MailSender with an explicit opt-out for local development. Validation completed locally with targeted API/Core security tests plus API/Core builds. The security patch branch was not published publicly because te repository's SECURITY.md asks reporters not to open public vulnerability issues.

AnalysisAI

Improper input validation in AgenticMail's storage API (npm @agenticmail/api <= 0.9.31 and @agenticmail/core <= 0.9.9) lets callers reach storage tables and clauses that bypass tenant ownership enforcement. The bundled hardening set fixes a raw-interpolated SQL HAVING clause, a comma-join table-reference parsing gap that let cross-tenant tables (e.g. agt_victim) escape ownership checks, plus SMTP header control-character injection and a MailSender that did not verify TLS certificates by default. EPSS is very low (0.01%, 3rd percentile) and there is no public exploit identified at time of analysis, so this is a disclosed-and-patched supply-chain library issue rather than an actively exploited one.