Agenticmail vulnerabilities
We track 4 vulnerabilities in Agenticmail products across 6 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2026.
Latest Agenticmail vulnerabilities
- 8.2 High severity
@agenticmail/core: Missing Authentication for Critical Functionality
AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/claudecode prior to version 0.2.39, @agenticmail/codex prior to version 0.1.33, @agenticmail/core prior to version 0.9.43, and @agenticmail/openclaw prior to version 0.5.71, tw
- 7.1 High severity
@agenticmail/api: Authorization Bypass Through User-Controlled Key
AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to `GET /ap
- 8.2 High severity
AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to…
AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to validation and and binding of inactive-agent hour filtering; storage SQL identifi
- 8.7 High severity
agenticmail: Missing Authentication for Critical Functionality
AgenticMail gives AI agents real email addresses and phone numbers. Prior to version 0.9.27, @agenticmail/mcp exposes a Streamable HTTP transport when started with --http or MCP_HTTP=1. In that mode, the /mcp endpoint accepts requests without any HTTP authenti