Coral Server Unauthorized Message Injection or Observation Vulnerability via Weak SSE Endpoint Validation
Vulnerability
A vulnerability exists in Coral Server versions prior to 1.1.0, where the Server-Sent Events (SSE) endpoint did not adequately verify the legitimacy of connecting agents in a session. This flaw could potentially enable unauthorized injection or observation of messages.
Impact
Exploitation of this vulnerability could lead to unauthorized message injection or observation on the affected SSE endpoint.
Remediation
Users can upgrade to Coral Server version 1.1.0 or later, where this vulnerability has been addressed.
Added: Mar 10, 2026, 6:45 PM
Updated: Mar 10, 2026, 6:45 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
6.6remediation
0.0relevance
3.7threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.