{"vulnerability": "CVE-2026-108756", "sightings": [{"uuid": "bf972035-ce2f-457d-bbc6-69c5c94d7276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108756", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117422427541108377", "content": "CVE-2026-108756 Abilityai Trinity through 0.9.5 Missing Authorization in Telegram Binding Routes Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform human-only binding operations. Attackers controlling an agent, typically via prompt injection, can send messages through the owner's bot token, replace the binding with their own token, or delete it.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108756https://hackmd.io/@haind/rJ2OBa8sflhttps://github.com/Abilityai/trinity/blob/e38c1c0f2567c602541c90c4c92152e99e6ead11/src/backend/routers/telegram.py#L168-L219https://github.com/Abilityai/trinity/blob/e38c1c0f2567c602541c90c4c92152e99e6ead11/src/backend/routers/telegram.py#L258-L323https://github.com/Abilityai/trinityhttps://www.vulncheck.com/advisories/abilityai-trinity-through-0.9.5-missing-authorization-in-telegram-binding-routes#Abilityai #trinity#CVE_2026_108756#bot", "creation_timestamp": "2026-10-11T13:07:33.617197Z"}]}