IntentKit tool authorization bypass exposed in CVE-2026-76066

CVE-2026-76066 in the IntentKit agent platform through version 2.6.3 lets callers invoke tools that were never advertised: the executor validated calls against the full registry instead of the per-request binding. CVSS 4.0 score is 8.7, and the fix landed in commit 5b91da5.

• CVSS 4.0 score of 8.7; IntentKit versions through 2.6.3 are affected
• Prompt injection or replayed history can trigger owner-level tools
• Wallet transfer, posting, memory writes and call-agent are exposed
• The flaw applies across WEB, API, TWITTER and TELEGRAM channels