crestalnetwork CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH crestalnetwork CVE published 2026-10-15

CVE-2026-76066

CVE-2026-76066 IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode: An authorization bypass vulnerability exists in IntentKit 2.6.3, allowing unauthenticated or public callers to execute owner-only state-changing tools without human-in-the-loop or approval gates in WEB, API, TWITTER, or TELEGRAM contexts. This vulnerability enables attackers to perform unauthorized actions, potentially leading [truncated]