CVE-2026-108756

Description

Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform human-only binding operations. Attackers controlling an agent, typically via prompt injection, can send messages through the owner's bot token, replace the binding with their own token, or delete it.

References

https://www.vulncheck.com/advisories/abilityai-trinity-through-0.9.5-missing-authorization-in-telegram-binding-routes

https://hackmd.io/@haind/rJ2OBa8sfl

https://github.com/Abilityai/trinity/blob/e38c1c0f2567c602541c90c4c92152e99e6ead11/src/backend/routers/telegram.py#L258-L323

https://github.com/Abilityai/trinity/blob/e38c1c0f2567c602541c90c4c92152e99e6ead11/src/backend/routers/telegram.py#L168-L219

https://github.com/Abilityai/trinity

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96921

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4