Advisories · Technology
cosmicstack-labs mercury-agent.
Every CVE that names cosmicstack-labs mercury-agent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery
- cosmicstack-labs mercury-agent
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize
- cosmicstack-labs mercury-agent
- CWE-179
- CWE-180
- CVSS 5.3 Medium
cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment
- cosmicstack-labs mercury-agent
- Privilege escalation
- CVSS 4.8 Medium
cosmicstack-labs mercury-agent Shell Permission Manifest permissions.ts PermissionManager.checkShellCommand information disclosure
- cosmicstack-labs mercury-agent
- Information disclosure
- Broken access control
- CVSS 5.3 Medium
cosmicstack-labs mercury-agent Shell Command Permission Check permissions.ts PermissionManager.checkShellCommand improper authorization
- cosmicstack-labs mercury-agent
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
cosmicstack-labs mercury-agent delegate_task Tool sub-agent.ts SubAgent.run improper authorization
- cosmicstack-labs mercury-agent
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization
- cosmicstack-labs mercury-agent
- Broken access control
- CVSS 5.3 Medium
cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignment
- cosmicstack-labs mercury-agent
- Privilege escalation