coral-server vulnerabilities

3 known vulnerabilities in coral-server from Coral-Protocol. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  coral-server: Missing Authorization

  CVE-2026-30970Mar 10, 2026Coral-Protocol

  Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, Coral Server allowed the creation of agent sessions through the /api/v1/sessions endpoint without strong

• 9.1 Critical severity

  coral-server: Authorization Bypass Through User-Controlled Key

  CVE-2026-30969Mar 10, 2026Coral-Protocol

  Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, Coral Server did not enforce strong authentication between agents and the server within an active session

• 9.8 Critical severity

  coral-server: Missing Authorization

  CVE-2026-30968Mar 10, 2026Coral-Protocol

  Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint (/sse/v1/...) in Coral Server did not strongly validate that a connecting agent was a le