PatchTheCEVCVE-2026-18997: A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12
29
Routine
MEDIUM 6.3
CVE-2026-18997 is a medium-severity flaw (CVSS 6.3) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12. This issue affects the function Agent.handleBgCommand of the file src/core/agent.ts of the component bg Command Handler. Performing a manipulation results in incorrect authorization. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded y
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Publisher (CNA): VulDB
Timeline
- Published CVE record published
- Updated Record last modified
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.