Evidence · DiggingBeagle record
VulnCheck: IntentKit tool execution authorization bypass
CVE-2026-76066 analysis distinguishes hiding tools from users and enforcing permission at ToolNode execution.
- Source role
- primary disclosure
Evidence record
CVE-2026-76066 analysis distinguishes hiding tools from users and enforcing permission at ToolNode execution.
Claim-level citations (1)
- supportsIntentKit hid restricted tools without enforcing their execution permissions: VulnCheck reports that IntentKit visible-tool filtering was not repeated as an authorization check when ToolNode executed a named tool.
Technical description; ToolBindingMiddleware and ToolNode