cvedb.io
CVE-2026-30969
CRITICAL · CVSS 9.1
EPSS exploitation probability: 0%
Published 2026-03-10T18:18:55.760 · Last modified 2026-06-17T10:33:14.760

Summary

Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, Coral Server did not enforce strong authentication between agents and the server within an active session. This could allow an attacker who obtained or predicted a session identifier to impersonate an agent or join an existing session. This vulnerability is fixed in 1.1.0.

Affected products

coralos — coral_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when coralos ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.