Email Service Vulnerability in AgenticMail by Agentic

CVE-2026-47255

What is CVE-2026-47255?

The AgenticMail service, utilized for managing AI agents' email communications, exhibits multiple vulnerabilities related to input validation and security filtering. Affected components, specifically @agenticmail/api and @agenticmail/core, fail to validate SQL identifiers properly, allowing potential unauthorized access to sensitive data. Additional concerns include improper handling of SMTP commands and inadequate verification of TLS certificates, posing threats to email safety. It is crucial to update to the latest versions to mitigate these risks and ensure robust security for communications.

References