CVE-2026-76066

validated

GHSA-6qqv-mhm9-qrfj ↗EUVD-2026-101810 ↗

check availablenot proven exploitable

cve.orgpublic pockev

crestalnetwork intentkit <= 2.6.3

CWE-862 Missing Authorization

ETK-2026-1624, permanent identifier

cvss8.7cna vendorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

+3h24mTTV

38mAI analysis

Check if you are vulnerable

timeline

0 = cve.org publication

trigger signal (cve.org) +0hcheck available+3h24magent stopped

+1h

+2h

+3h

description

IntentKit through 2.6.3 may authorize tool requests against a broader registry than the tools permitted for an individual request. Public or unauthenticated callers using exposed web, API, or messaging integrations could trigger owner-restricted state-changing actions without the intended approval step.

mitigation

Restrict or disable public access to affected web, API, and messaging integrations, and disable owner-capable state-changing tools until authorization is verified. Require authenticated, isolated request handling and do not reuse untrusted thread, checkpoint, or history data.

check

available

exploit

automation

deterministic

auth required

EPSS

0.39%31st percentile

agent run time

38m

cve.org record, t = 0

2026-10-15 01:39Z

Δ to public poc

–

Δ to kev

–

outcome

Check only, differential: the check fires on the vulnerable build and is silent on the patched one.

source signals

Public signals that triggered or updated the pipeline. These are inputs for the deltas above.

2026-10-15 01:39Z
cve_org: trigger signal, started the run
https://www.cve.org/CVERecord?id=CVE-2026-76066

this entry in the feed

GET /api/v1/feed/CVE-2026-76066

{
  "etk_id": "ETK-2026-1624",
  "cve_id": "CVE-2026-76066",
  "display_id": "CVE-2026-76066",
  "ghsa_id": "GHSA-6qqv-mhm9-qrfj",
  "euvd_id": "EUVD-2026-101810",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authorization bypass in IntentKit tool execution",
  "summary": "IntentKit through 2.6.3 may authorize tool requests against a broader registry than the tools permitted for an individual request. Public or unauthenticated callers using exposed web, API, or messaging integrations could trigger owner-restricted state-changing actions without the intended approval step.",
  "mitigation": "Restrict or disable public access to affected web, API, and messaging integrations, and disable owner-capable state-changing tools until authorization is verified. Require authenticated, isolated request handling and do not reuse untrusted thread, checkpoint, or history data.",
  "vendor": "crestalnetwork",
  "product": "intentkit",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 2.6.3"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "intentkit",
      "purl": null
    }
  ],
  "cwes": [
    862
  ],
  "cvss_score": 8.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
  "epss_score": 0.0039,
  "epss_percentile": 0.3123,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 38.043645016666666,
  "t0_at": "2026-10-15T01:39:56.474000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-15T05:03:38.135433+00:00",
      "days": 0.1414544147337963,
      "is_lower_bound": false,
      "measured_at": "2026-10-15T01:39:56.474000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-15T01:39:56.474000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-15T01:39:56.474000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76066"
    }
  }
}

Anchor corroborated by the cve.org commit a64d82a14932.

published 2026-10-15 02:10Z
last change 2026-10-21 04:45Z

Need the technical details behind an entry?

Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.