Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.2

Atomic-Agents-Stack before 1.1.0 lets network attackers run code

CVE-2026-91988 · published 27 days ago
Summary

Versions of atomic-agents-stack earlier than 1.1.0 accept unencrypted HTTP requests, so a person who can intercept network traffic could change the data the software receives and cause it to launch any command on the host. This could let an attacker take control of the affected system. Update to version 1.1.0 or later, or configure the software to use secure (HTTPS) connections only.

What to do
  • Update dep0we atomic-agents-stack to version 1.1.0 or later.
Affected software
VendorProductAffected versions
dep0we atomic-agents-stack < 1.1.0
Original advisory text
atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCP
atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog responses. Attackers can inject arbitrary command and argument values that are spawned as local subprocesses by MCPClientPool to achieve code execution on the agent host.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.2 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-319Cleartext Transmission of Sensitive Information
Timeline
Published15 Sep 2026
Updated12 Oct 2026
First seen15 Sep 2026
Sources
CVE-2026-91988 · NVD
CVE-2026-91988 · MITRE
Track software like this
Free during beta