CVE-2026-47255: AgenticMail API/storage and outbound relay hardening fixes
The current upstream main branch at commit 7e0206d was reviewed, and the fix-first patch set was rebased on 2026-05-18. The patches cover: validated and bound inactive-agent hour filtering; storage SQL identifier validation; metadata-backed ownership checks for raw storage SQL; blocking direct storage metadata access through raw SQL; fail-closed outbound worker secret handling; SMTP envelope/header control-character validation before command construction; and TLS certificate verification as the default for MailSender with an explicit opt-out for local development. Validation completed locally with targeted API/Core security tests plus API/Core builds. The security patch branch was not published publicly because te repository’s SECURITY.md asks reporters not to open public vulnerability issues.
References
- github.com/advisories/GHSA-wjjv-3mj2-39hf
- github.com/agenticmail/agenticmail/blob/7b9b05d973676e9f3d097c08b8e649f59bfc15d0/CHANGELOG.md?plain=1
- github.com/agenticmail/agenticmail/blob/7b9b05d973676e9f3d097c08b8e649f59bfc15d0/packages/core/src/mail/sender.ts
- github.com/agenticmail/agenticmail/commit/1408de543fa3577d8c2d4fdb289c75fe6faafac7
- github.com/agenticmail/agenticmail/commit/234b811e426a0743170f3b10bc43419d64330155
- github.com/agenticmail/agenticmail/commit/6c70c8254c906f823392d7f5ccee88a5481e7731
- github.com/agenticmail/agenticmail/commit/8cb053f2307dd77b7736ffa0d7df04b0ccc3272d
- github.com/agenticmail/agenticmail/security/advisories/GHSA-wjjv-3mj2-39hf
- nvd.nist.gov/vuln/detail/CVE-2026-47255
Code Behaviors & Features
Detect and mitigate CVE-2026-47255 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →