Crestalnetwork vulnerabilities
We track 1 vulnerability in Crestalnetwork products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Crestalnetwork vulnerabilities
- 7.5 High severity
intentkit: Missing Authorization
IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, a