cosmicstack-labs

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

cosmicstack-labs records in CISA KEV

No cosmicstack-labs vulnerabilities are listed in CISA KEV.

Records

8 records

TI-2026-61717 CVE-2026-90814 · GHSA-fwp2-vg7p-f8x2

cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery

MEDIUM 57

A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-09-14 No fix listed CWE-918

TI-2026-61716 CVE-2026-90813 · GHSA-9hv7-6jr2-3g59

cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize

MEDIUM 57

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00554 Published 2026-09-14 No fix listed CWE-179

TI-2026-61715 CVE-2026-90812 · GHSA-27qc-j388-jw8p

cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment

MEDIUM 57

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00385 Published 2026-09-14 No fix listed CWE-266

TI-2026-61713 CVE-2026-90810 · GHSA-xm72-m8gr-4jp8

Improper authorization in cosmicstack-labs mercury-agent

MEDIUM 57

A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-09-14 No fix listed CWE-266

TI-2026-15525 CVE-2026-18998 · GHSA-7hmv-r6w5-pr73

cosmicstack-labs mercury-agent delegate_task Tool sub-agent.ts SubAgent.run improper authorization

MEDIUM 57

A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-08-06 No fix listed CWE-266

TI-2026-15524 CVE-2026-18997 · GHSA-9hrj-55h5-5mr2

cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization

MEDIUM 57

A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-08-06 No fix listed CWE-285

TI-2026-15523 CVE-2026-18996 · GHSA-ccg4-hv3q-9622

cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignment

MEDIUM 57

A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00427 Published 2026-08-06 No fix listed CWE-266

TI-2026-61714 CVE-2026-90811 · GHSA-x845-4vjw-3f37

Information disclosure in cosmicstack-labs mercury-agent

MEDIUM 55

A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00149 Published 2026-09-14 No fix listed CWE-200

Open these records in search →

Critical	0
High	0
Medium	8
Low	0
No CVSS	0