Is there a public PoC exploit available for CVE-2026-66027?

Yes, a public proof-of-concept exploit is available for CVE-2026-66027. Prioritise patching immediately. EPSS: 0.3%.

Is there a patch available for CVE-2026-66027?

Yes, a patch is available for CVE-2026-66027. Update the affected software to the latest version immediately.

Suna CVE-2026-66027

Q: What is the CVSS score of CVE-2026-66027?

CVE-2026-66027 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-48641 HIGH

Missing Authorization (CWE-862)

2026-07-24 VulnCheck

GHSA-59cg-fj2q-33c4

Authentication Bypass Suna

8.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulnCheck) · only source for this CVE.

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Jul 26, 2026 - 11:45 vuln.today

Analysis Generated

Jul 26, 2026 - 11:45 vuln.today

CVE Published

Jul 24, 2026 - 15:27 cve.org

HIGH 8.7

DescriptionCVE.org

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.

AnalysisAI

We are tasked to produce a JSON analysis for CVE-2026-66027 based on the provided data. The analysis must synthesize all the information, cross-reference, and produce a coherent summary, technical context, risk assessment, affected products, remediation, exploit scenario, exploitation conditions, attack chain, confidence notes, prevalence, prevalence basis, assessed_cvss_vector, assessed_cvss_rationale, assessed_cvss40_vector.

We have:

CVE: CVE-2026-66027
Description: broken access control in message queue API of Suna before 0.9.102, allowing authenticated attackers to access/manipulate other users' queue resources. Can read pending prompt queues, read/delete individual sessions, inject prompts into another user's session queue, causing background drainer to forward malicious messages to victim's running AI agent with victim's credentials.
CVSS Score: 8.7 (base score based on CVSS 4.0 vector given: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N)
CWE: CWE-862 (Missing Authorization)
Multi-source: EPSS 0.26% (percentile 17%) so low exploitation probability. POC/Exploit: Publicly available. Patch: Available from vendor. Reported by VulnCheck.
CPE: cpe:2.3:a:kortix-ai:suna:*:*:*:*:*:*:*:* (so product is Suna from kortix-ai).
Tags: Authentication Bypass, Suna
SSVC: Exploitation: poc, Automatable: no, Technical Impact: total.
ENISA EUVD ID confirms affected versions: suna 0 <0.9.102. So all versions before 0.9.102 are affected.
References:
exploit: https://github.com/geo-chen/oss/blob/main/suna.md (likely a writeup)
release: https://github.com/kortix-ai/suna/releases/tag/v0.9.102
pull request: https://github.com/kortix-ai/suna/pull/4373 (security fix PR)
patch commit: https://github.com/kortix-ai/suna/commit/7536a7d47fc93abcb66e677fcc993b390c81296a
vulncheck advisory: https://www.vulncheck.com/advisories/suna-broken-access-control-via-message-queue-api
NVD link: https://nvd.nist.gov/vuln/detail/CVE-2026-66027