CVE-2026-30968

Critical

Published: 10 March 2026

Published

10 March 2026

Modified

13 March 2026

KEV Added

—

Patch

—

CVSS Score 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score 0.0006 17.4th percentile

Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-30968 is a critical-severity Missing Authorization (CWE-862) vulnerability in Coralos Coral Server. Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 17.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and SC-23 (Session Authenticity).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploit Public-Facing Application (T1190). What defenders deploy: see the NIST 800-53 controls recommended below.

Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

AC-3 Access Enforcement good match

prevent

Directly requires enforcement of approved authorizations for access to the SSE endpoint, addressing the missing validation of legitimate session participants.

SC-23 Session Authenticity good match

prevent

Mandates verification of each communication session and rejection of unverifiable ones, preventing unauthorized connections to the SSE endpoint.

AC-6 Least Privilege partial match

prevent

Enforces least privilege to restrict actions of connecting agents to only those necessary for legitimate session participation, mitigating unauthorized injection or observation.

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access

Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.

attack.mitre.org →

Why these techniques?

Missing authorization (CWE-862) on the network-accessible SSE endpoint directly enables remote exploitation of a public-facing application without authentication, matching T1190 for initial access via the described unauthorized session injection or traffic observation.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint (/sse/v1/...) in Coral Server did not strongly validate that a connecting agent was a legitimate participant…

in the session. This could theoretically allow unauthorized message injection or observation. This vulnerability is fixed in 1.1.0.

Deeper analysisAI

CVE-2026-30968 is a vulnerability in Coral Server, an open collaboration infrastructure that enables communication, coordination, trust, and payments for The Internet of Agents. In versions prior to 1.1.0, the SSE endpoint (/sse/v1/...) failed to strongly validate that a connecting agent was a legitimate participant in the session, as mapped to CWE-862 (Missing Authorization). The issue carries a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating critical severity due to its network accessibility and high impacts on confidentiality, integrity, and availability.

Attackers require no privileges, authentication, or user interaction to exploit this over the network with low complexity. Successful exploitation could theoretically enable unauthorized message injection into sessions or observation of session traffic, potentially compromising the integrity and privacy of agent communications.

The vulnerability is addressed in Coral Server version 1.1.0. Security practitioners should upgrade to this release for mitigation. Additional details are available in the GitHub security advisory at https://github.com/Coral-Protocol/coral-server/security/advisories/GHSA-2rj5-3pgm-xqw9 and the release notes at https://github.com/Coral-Protocol/coral-server/releases/tag/v1.1.0.