Auth bypass in Agenticmail @Agenticmail/claudecode
CVE-2026-57495
AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/claudecode prior to version 0.2.39, @agenticmail/codex prior to version 0.1.33, @agenticmail/core prior to version 0.9.43, and @agenticmail/openclaw prior…
Vulnerability class: Broken Authentication
Affected products
- Agenticmail @Agenticmail/claudecode — versions < 0.2.39
- Agenticmail @Agenticmail/codex — versions < 0.1.33
- Agenticmail @Agenticmail/openclaw — versions < 0.5.71
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)