CVE-2026-18996

MEDIUM

cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignment

Title source: cna
STIX 2.1

Description

A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12. This vulnerability affects the function PermissionManager.checkShellCommand of the file src/capabilities/permissions.ts of the component run_command Handler. Such manipulation leads to incorrect privilege assignment. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

References (9)

Core 9
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-386379 | cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignment
https://vuldb.com/vuln/386379
Signature, Permissions Required signature permissions-required
VDB-386379 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/386379/cti
Third Party Advisory third-party-advisory
CVE-2026-18996 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-18996
Third Party Advisory third-party-advisory
Submit #862625 | cosmicstack-labs mercury-agent 1.1.12 Incorrect Privilege Assignment (CWE-266)
https://vuldb.com/submit/862625
Third Party Advisory third-party-advisory
Submit #862630 | cosmicstack-labs mercury-agent 1.1.12 Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) (Duplicate)
https://vuldb.com/submit/862630
Third Party Advisory third-party-advisory
Submit #862636 | cosmicstack-labs mercury-agent 1.1.12 Incorrect Authorization (CWE-863) (Duplicate)
https://vuldb.com/submit/862636
Third Party Advisory third-party-advisory
Submit #862637 | cosmicstack-labs mercury-agent 1.1.12 Improper Authorization (CWE-285) (Duplicate)
https://vuldb.com/submit/862637

Scores

CVSS v3 6.3
EPSS 0.0024
EPSS Percentile 15.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-266
Status published
Products (13)
cosmicstack-labs/mercury-agent 1.1.0
cosmicstack-labs/mercury-agent 1.1.1
cosmicstack-labs/mercury-agent 1.1.10
cosmicstack-labs/mercury-agent 1.1.11
cosmicstack-labs/mercury-agent 1.1.12
cosmicstack-labs/mercury-agent 1.1.2
cosmicstack-labs/mercury-agent 1.1.3
cosmicstack-labs/mercury-agent 1.1.4
cosmicstack-labs/mercury-agent 1.1.5
cosmicstack-labs/mercury-agent 1.1.6
... and 3 more
Published Aug 06, 2026
Tracked Since Aug 06, 2026