Abilityai Trinity missing authorization in Telegram router

Abilityai Trinity through version 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform operations restricted to human users. Attackers controlling an agent via prompt injection can send messages through the owner's bot token, replace bindings, or delete them.

Disclosed 11 October 2026 · Record updated 11 October 2026

Impact

Agent-scoped MCP API keys can be exploited to perform unauthorized human-only binding operations in Telegram router, including sending messages via owner's bot token, replacing bindings, or deleting them.

Our coverage

A puppet master's hand yanks invisible strings attached to a messenger bird, forcing it to carry forged letters while its true owner watches helplessly from behind glass.

Vulnerabilities

Agent API keys can hijack Telegram bindings in Abilityai Trinity

A missing authorisation flaw lets a prompt-injected agent send messages as its owner's bot, swap the bot token or delete the link entirely.

11 Oct 2026

Sources

nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-108756