Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

AgentGPT 1.0.0 lets anyone change data without proper checks

CVE-2026-51867 · published 18 days ago
Summary

The AgentGPT version 1.0.0 web service has a route that accepts a user‑provided identifier and then accesses data without confirming who owns it or whether the requester belongs to the correct tenant or workspace. This could allow an external user to read, modify, or delete data that should be restricted. Apply the vendor’s patch or upgrade to a newer release that adds proper ownership and tenant verification to the affected API endpoint.

Original advisory text
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reac...
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on that object.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-284Improper Access Control
Timeline
Published30 Sep 2026
Updated19 Oct 2026
First seen30 Sep 2026
Sources
CVE-2026-51867 · NVD
CVE-2026-51867 · MITRE
Track software like this
Free during beta