Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

mercury-agent — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in mercury-agent, with AI-generated Chinese analysis, references, and POCs.

Vendor: cosmicstack-labs

CVE ID Title CVSS Severity Published
CVE-2026-90814 cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery CWE-918 6.3 Medium 2026-09-14
CVE-2026-90813 cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize CWE-180 4.3 Medium 2026-09-14
CVE-2026-90812 cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment CWE-266 4.3 Medium 2026-09-14
CVE-2026-90811 cosmicstack-labs mercury-agent Shell Permission Manifest permissions.ts PermissionManager.checkShellCommand information disclosure CWE-200 3.3 Low 2026-09-14
CVE-2026-90810 cosmicstack-labs mercury-agent Shell Command Permission Check permissions.ts PermissionManager.checkShellCommand improper authorization CWE-285 6.3 Medium 2026-09-14
CVE-2026-18998 cosmicstack-labs mercury-agent delegate_task Tool sub-agent.ts SubAgent.run improper authorization CWE-285 6.3 Medium 2026-08-06
CVE-2026-18997 cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization CWE-863 6.3 Medium 2026-08-06
CVE-2026-18996 cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignment CWE-266 6.3 Medium 2026-08-06

All 8 known CVE vulnerabilities affecting mercury-agent with full Chinese analysis, references, and POCs where available.