TI-2026-58779 CVE-2026-85667 · GHSA-g573-j843-xr77
xiaobei through 5.5.2 Unauthenticated Webhook Message Injection
Priority HIGH 81
xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent pipeline.