Abilityai

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Abilityai records in CISA KEV

No Abilityai vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70734 CVE-2026-108756 · GHSA-65xq-cj8m-pqxc

Missing authorization in Abilityai Trinity Telegram binding routes

MEDIUM 57

Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform human-only binding operations.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00219 Published 2026-10-11 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0