{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18997", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-08-05T19:41:35.352Z", "datePublished": "2026-08-06T04:30:10.579Z", "dateUpdated": "2026-08-06T14:54:31.487Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-06T04:30:10.579Z"}, "title": "cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-863", "lang": "en", "description": "Incorrect Authorization"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-285", "lang": "en", "description": "Improper Authorization"}]}], "affected": [{"vendor": "cosmicstack-labs", "product": "mercury-agent", "versions": [{"version": "1.1.0", "status": "affected"}, {"version": "1.1.1", "status": "affected"}, {"version": "1.1.2", "status": "affected"}, {"version": "1.1.3", "status": "affected"}, {"version": "1.1.4", "status": "affected"}, {"version": "1.1.5", "status": "affected"}, {"version": "1.1.6", "status": "affected"}, {"version": "1.1.7", "status": "affected"}, {"version": "1.1.8", "status": "affected"}, {"version": "1.1.9", "status": "affected"}, {"version": "1.1.10", "status": "affected"}, {"version": "1.1.11", "status": "affected"}, {"version": "1.1.12", "status": "affected"}], "cpes": ["cpe:2.3:a:cosmicstack-labs:mercury-agent:*:*:*:*:*:*:*:*"], "modules": ["bg Command Handler"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12. This issue affects the function Agent.handleBgCommand of the file src/core/agent.ts of the component bg Command Handler. Performing a manipulation results in incorrect authorization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-08-05T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-08-05T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-08-05T21:46:56.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "ChenMarry (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/386380", "name": "VDB-386380 | cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/386380/cti", "name": "VDB-386380 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-18997", "name": "CVE-2026-18997 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/862627", "name": "Submit #862627 | cosmicstack-labs mercury-agent 1.1.12 Incorrect Authorization (CWE-863)", "tags": ["third-party-advisory"]}, {"url": "https://github.com/cosmicstack-labs/mercury-agent/issues/73", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/cosmicstack-labs/mercury-agent/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202608"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-06T14:54:19.742914Z", "id": "CVE-2026-18997", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T14:54:31.487Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-18997", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-06T14:54:19.742914Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T14:54:25.319Z"}}], "cna": {"title": "cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization", "credits": [{"lang": "en", "type": "reporter", "value": "ChenMarry (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:cosmicstack-labs:mercury-agent:*:*:*:*:*:*:*:*"], "vendor": "cosmicstack-labs", "modules": ["bg Command Handler"], "product": "mercury-agent", "versions": [{"status": "affected", "version": "1.1.0"}, {"status": "affected", "version": "1.1.1"}, {"status": "affected", "version": "1.1.2"}, {"status": "affected", "version": "1.1.3"}, {"status": "affected", "version": "1.1.4"}, {"status": "affected", "version": "1.1.5"}, {"status": "affected", "version": "1.1.6"}, {"status": "affected", "version": "1.1.7"}, {"status": "affected", "version": "1.1.8"}, {"status": "affected", "version": "1.1.9"}, {"status": "affected", "version": "1.1.10"}, {"status": "affected", "version": "1.1.11"}, {"status": "affected", "version": "1.1.12"}]}], "timeline": [{"lang": "en", "time": "2026-08-05T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-08-05T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-08-05T21:46:56.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/386380", "name": "VDB-386380 | cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/386380/cti", "name": "VDB-386380 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-18997", "name": "CVE-2026-18997 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/862627", "name": "Submit #862627 | cosmicstack-labs mercury-agent 1.1.12 Incorrect Authorization (CWE-863)", "tags": ["third-party-advisory"]}, {"url": "https://github.com/cosmicstack-labs/mercury-agent/issues/73", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/cosmicstack-labs/mercury-agent/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202608"], "descriptions": [{"lang": "en", "value": "A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12. This issue affects the function Agent.handleBgCommand of the file src/core/agent.ts of the component bg Command Handler. Performing a manipulation results in incorrect authorization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-863", "description": "Incorrect Authorization"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-285", "description": "Improper Authorization"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-06T04:30:10.579Z"}}}, "cveMetadata": {"cveId": "CVE-2026-18997", "state": "PUBLISHED", "dateUpdated": "2026-08-06T14:54:31.487Z", "dateReserved": "2026-08-05T19:41:35.352Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-08-06T04:30:10.579Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.8"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.9"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.10"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.11"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.1.12"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "mercury-agent", "source": "cna", "vendor": "cosmicstack-labs"}, "product": "mercury-agent", "vendor": "cosmicstack-labs"}], "created": "2026-08-06T06:30:03.716703+00:00", "title": "Mercury Agent Background Command Authorization Bypass", "updated": "2026-08-06T06:30:03.935068+00:00", "vendors": ["cosmicstack-labs", "cosmicstack-labs$PRODUCT$mercury-agent"]}