kortix-ai

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

kortix-ai records in CISA KEV

No kortix-ai vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-47016 CVE-2026-66027 · GHSA-59cg-fj2q-33c4

Suna < 0.9.102 Broken Access Control via Message Queue API

HIGH 73

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing owne…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00456 Published 2026-07-24 Fixed in 0.9.102 CWE-862

TI-2026-10949 CVE-2026-12811 · GHSA-fpgm-v536-ccc8

kortix-ai suna Auth Endpoint page.tsx router.push cross site scripting

MEDIUM 57

A weakness has been identified in kortix-ai suna up to 0.8.38.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00497 Published 2026-06-21 Fixed in 0.8.39 CWE-79

TI-2026-70528 CVE-2026-108115 · GHSA-f37m-qrrx-ww7w

Server-side request forgery in Kortix Suna bypasses IP guard

MEDIUM 45

Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 desti…

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00189 Published 2026-10-10 Fixed in 0.13.52 CWE-918

Open these records in search →

Critical	0
High	1
Medium	1
Low	1
No CVSS	0