CVE-2026-47255
NoneAgenticMail API/storage and outbound relay hardening fixes
CVSS
—
EPSS
0.3%
Published
May 29, 2026
CISA due date
—
The record
The current upstream main branch at commit 7e0206d was reviewed, and the fix-first patch set was rebased on 2026-05-18. The patches cover: validated and bound inactive-agent hour filtering; storage SQL identifier validation; metadata-backed ownership checks for raw storage SQL; blocking direct storage metadata access through raw SQL; fail-closed outbound worker secret handling; SMTP envelope/header control-character validation before command construction; and TLS certificate verification as the default for MailSender with an explicit opt-out for local development. Validation completed locally with targeted API/Core security tests plus API/Core builds. The security patch branch was not published publicly because te repository's SECURITY.md asks reporters not to open public vulnerability issues.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @agenticmail/api | 0 | 0.9.32 |
| npm | @agenticmail/core | 0 | 0.9.10 |
Related vulnerabilities
- GHSA-wjjv-3mj2-39hf AgenticMail API/storage and outbound relay hardening fixes Same vulnerability
- GHSA-hjwc-26pj-v3pm AgenticMail: Cross-agent task authorization bypass in AgenticMail API Also affects @agenticmail/api
- GHSA-fq4x-789w-jg5h AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the… Also affects @agenticmail/core
- CVE-2026-113786 pypdf is a free and open-source pure-python PDF library. CWE-20
- CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. CWE-20
- CVE-2026-111869 A vulnerability was identified in makeplane plane up to 1.4.2. CWE-20
- CVE-2026-100347 kin-openapi is a Go project for handling OpenAPI files. CWE-20
- CVE-2026-99999 In the Linux kernel, the following vulnerability has been resolved: ipv4: validate… CWE-20