Missing authorization in Abilityai Trinity Telegram binding routes
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-862.
Summary
Abilityai Trinity through 0.9.5 contains a missing authorization flaw in its Telegram router (CWE-862). Agent-scoped MCP API keys can perform binding operations that are meant only for humans. An attacker who controls an agent, typically via prompt injection, can send messages through the owner's bot token, replace the binding with their own token, or delete it.
Written with Claude Haiku 5.5 from the sources below · 2026-10-29
Description from the CNA
Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform human-only binding operations. Attackers controlling an agent, typically via prompt injection, can send messages through the owner's bot token, replace the binding with their own token, or delete it.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
The sources list no fixed version for Abilityai Trinity.
Written with Claude Haiku 5.5 from the sources below · 2026-10-29
Timeline
- 2026-10-11 Threatist record created from CVE-2026-108756
- 2026-10-11 Alias added: GHSA-65xq-cj8m-pqxc
- 2026-10-13 CISA SSVC decision points changed
- 2026-10-13 Priority changed: LOW → MEDIUM
References
Advisory 1
Sources
- CVE-2026-108756 · CVE Program
- CVE-2026-108756 · NVD
- FIRST EPSS
- GHSA-65xq-cj8m-pqxc · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences