intentkit vulnerabilities

1 known vulnerability in intentkit from Crestalnetwork. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  intentkit: Missing Authorization

  CVE-2026-76066Oct 15, 2026Crestalnetwork

  IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, a