{"schema":"threatline.record/2","record":{"id":"CVE-2026-103090","aliases":["GHSA-hp3x-79wr-rx66"],"summary":"Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)","details":"Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control plane enrollment status handler (HandleEnrollStatus at GET /enroll/status in internal/controlplane/server.go) in Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through 0.1.0-alpha.8 allow an unauthenticated remote attacker to retrieve an approved bootstrap-enrolled peer's signed Biscuit identity token by supplying a peer_id obtainable from the unauthenticated GET /info endpoint. A related flaw in POST /enroll allowed any bootstrap-token holder to re-fetch another peer's credential. An attacker can replay the disclosed Biscuit token as a bearer credential on /policies to read mesh authorization policies and on /routers/lease to overwrite advertised router multiaddrs. Users should upgrade to version 0.1.0-alpha.9 or later, which requires cryptographic proof of possession of the enrollment private key on credential-releasing endpoints, enforces rate limiting, and validates router lease addresses.","categories":["Unclassified"],"product":"SAM","vendor":"Google","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103090","source_modified_at":"2026-10-21T22:16:59.777Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"SAM","vendor":"Google","versions":[{"status":"affected","version":"0.1.0-alpha.1","lessThan":"0.1.0-alpha.9","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103090","source_modified_at":"2026-10-21T22:16:59.777Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"SAM","ecosystem":null},"version":"0.1.0-alpha.9","basis":"first unaffected version stated in the CVE record"}],"cvss":8.8,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00335,"percentile":0.25666,"score_date":"2026-10-23"},"published_at":"2026-10-21T22:16:59.777Z","modified_at":"2026-10-21T22:16:59.777Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-103090","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-21T22:16:59.777Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-103090","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/google/sam/security/advisories/GHSA-hp3x-79wr-rx66","tags":["vendor-advisory"]},{"source":"CVE List","url":"https://github.com/google/sam/releases/tag/v0.1.0-alpha.9","tags":["release-notes"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-21T22:16:59.777Z","content_hash":"f548b9389a40d63b9850d1cf6e76b33db280714b109893d827bd6ce2294257b5"}}