EUVD-2026-77775
GHSA-fwp2-vg7p-f8x2
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github.ts of the component GitHub API Handler. This manipulation of the argument path causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Server-side request forgery in cosmicstack-labs Mercury Agent (versions 1.1.0 through 1.1.13) lets an attacker who can influence the path argument of the GitHub API handler force the agent to issue requests to arbitrary hosts, including internal services reachable from the agent's network position. The flaw is in the githubRequest function of src/utils/github.ts (CWE-918), and publicly available exploit code exists — the reporter's tracking issue (#81) on the project repository is public. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Mercury Agent
View allIncorrect privilege assignment in cosmicstack-labs mercury-agent (all versions through 1.1.12) allows authenticated remo
Improper authorization in cosmicstack-labs mercury-agent's PermissionManager.checkShellCommand function (versions 1.1.0
Improper authorization in cosmicstack-labs mercury-agent's delegate_task tool allows a remotely authenticated low-privil
Incorrect authorization in cosmicstack-labs mercury-agent through version 1.1.12 allows remote authenticated attackers t
Mercury Agent versions through 1.1.13 gate shell execution by validating commands before canonicalizing them, so a calle
A local information-disclosure weakness in cosmicstack-labs mercury-agent through version 1.2.0 lets a low-privileged lo
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today