Missing Authentication and Insufficient Credential Protection in Google OSS Agent Mesh

CVE-2026-103090

What is CVE-2026-103090?

The Google OSS Agent Mesh is susceptible to vulnerabilities due to insufficient authentication mechanisms and lack of protection for sensitive credentials. Specifically, an unauthenticated remote attacker can exploit the control plane enrollment status handler to obtain a peer's signed Biscuit identity token using a peer_id from an unauthenticated endpoint. Additionally, holders of valid bootstrap tokens can access or re-fetch other peers' credentials, posing a significant security risk. To mitigate these vulnerabilities, users are advised to upgrade to version 0.1.0-alpha.9 or later, which implements cryptographic proof of possession for credential-releasing endpoints, enhances rate limiting, and validates router lease addresses.

References