EUVD-2026-78658
GHSA-gpqc-jrqh-x9xp
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulnCheck) · only source for this CVE.
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
5DescriptionCVE.org
atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the _estimate_batch_cost function that returns zero cost for unknown models not in the pricing table. Attackers can configure deployments with unknown model identifiers to bypass daily cost caps and exceed budget limits in parallel batch operations.
AnalysisAI
Cost-guardrail bypass in atomic-agents-stack 1.0.0 and earlier lets a caller run parallel helper/delegate batches with a model identifier that is absent from the hardcoded pricing table, causing the per-batch reservation to be calculated as $0.00 and silently skipped. Because the reservation is the only defense against the documented fan-out race — where every parallel worker reads the same pre-batch on-disk cost total and each individually passes the cap check — a single batch can blow past a configured daily_cap_usd budget that the operator believes is enforced. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Atomic Agents Stack
View allatomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowin
Arbitrary file read in atomic-agents-stack before 1.1.0: the optional dashboard HTTP server builds filesystem paths stra
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today