Missing Authorization Vulnerability in Abilityai Trinity Telegram Router
CVE-2026-108756

5.3MEDIUM

Key Information:

Vendor

Abilityai

Status
Trinity
Vendor
CVE Published:
11 October 2026

What is CVE-2026-108756?

Abilityai Trinity versions up to 0.9.5 are susceptible to a missing authorization flaw within the Telegram router. This vulnerability allows improperly scoped MCP API keys to execute operations intended solely for human users. Attackers exploiting this issue can control an agent, often through prompt injection, to manipulate messages sent via the owner's bot token. Consequently, they may substitute the existing binding with their own token or completely remove it, leading to potential unauthorized access and misuse of the owner's bot functionalities.

Affected Version(s)

trinity 0 <= 0.9.5

References

https://hackmd.io/@haind/rJ2OBa8sfl
third-party-advisory
https://github.com/Abilityai/trinity/blob/e38c1c0f2567c60...
technical-description
https://github.com/Abilityai/trinity/blob/e38c1c0f2567c60...
technical-description

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HaiND from the Post and Telecommunication Institute of Technology
.