IntentKit authorization bypass allows unauthorized tool execution

IntentKit through version 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against the full registry instead of narrowed per-request tool advertisement, allowing unauthenticated callers to execute owner-restricted capabilities like wallet transfers and memory writes through prompt injection or checkpoint replay.

Disclosed 15 October 2026 · Record updated 15 October 2026

Impact

Unauthenticated or public callers can execute unauthorized state-changing operations including wallet transfers, posting, memory writes, and agent calls without approval gates.

Our coverage

A thief slips past a guard booth by accessing the master keyring instead of the single key intended for today's delivery, opening every door in the building.

Vulnerabilities

IntentKit flaw lets outsiders trigger wallet transfers

CVE-2026-76066 covers IntentKit through version 2.6.3, where the executor checks tool calls against the full registry rather than the narrowed per-request list.

15 Oct 2026

Sources

nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-76066