Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, Coral Server allowed the creation of agent sessions through the /api/v1/sessions endpoint without strong authentication. This...
Vendor
Coral-Protocol vulnerabilities
3 published CVES affecting Coral-Protocol, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 3
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest Coral-Protocol CVEs
Newest publication first
-
HighCVSS 8.8 EPSS 0.36%
-
CVE-2026-30969 Coral Server has insufficient agent authentication in session communication channels
PublishedHighCVSS 7.6 EPSS 0.44%Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, Coral Server did not enforce strong authentication between agents and the server within an active session. This could allow a...
-
CVE-2026-30968 Coral Server has insufficient validation of agent identity for SSE connections
PublishedHighCVSS 8.6 EPSS 0.39%Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint (/sse/v1/...) in Coral Server did not strongly validate that a connecting agent was a legitimate participant...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.