How many CVEs does agenticmail have?

agenticmail has 4 published CVE records since 2026, including 4 in the last two years.

How many agenticmail CVEs are in CISA KEV?

None of agenticmail's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which agenticmail products have the most CVEs?

The agenticmail products with the most published CVEs are agenticmail, @agenticmail/core, @agenticmail/api, @agenticmail/openclaw, @agenticmail/codex.

What are the most common weakness types in agenticmail CVEs?

agenticmail's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-20 (Improper Input Validation), CWE-639 (Authorization Bypass Through User-Controlled Key).

Are there public exploits for agenticmail vulnerabilities?

Yes — 2 of agenticmail's CVEs have a known public exploit.

What is the average severity of agenticmail CVEs?

The average CVSS base score across agenticmail's scored CVEs is 8.1.

agenticmail Vulnerabilities: CVEs, CISA KEV & Security Advisories

Average CVSS: 8.1
Critical / high: 100%
Actively exploited (KEV): 0%
Public exploit available: 50%
Patch available: 100%

agenticmail Vulnerabilities

Overview

Security scorecard

Severity and exploitation

Most affected products

Common weakness types

CNAs that assign these CVEs

Latest agenticmail CVEs

Other vendors

Frequently asked questions

References

Track agenticmail vulnerabilities