AIKIDO-2026-616074
@ai-sdk/harness-acp is vulnerable to Authorization Bypass
59
Medium Risk
This Affects:
@ai-sdk/harness-acpTL;DR
The @ai-sdk/harness-acp host tool relay accepts a tool execution request from the sandbox without confirming that the request corresponds to a tool call the model actually generated during the active prompt turn. Untrusted sandbox code that obtains the relay credential can use this gap to invoke registered host tools outside of a model issued call. Tools that require explicit user approval remain protected, but tools without that requirement can be triggered directly. The fix verifies relay requests against the model generated tool calls before invoking the host tool.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you expose host tools through the @ai-sdk/harness-acp relay that do not require explicit user approval.
Background info
@ai-sdk/harness-acp is vulnerable to Authorization Bypass in versions 0.0.1 - 1.0.76.
How to fix this
Upgrade the @ai-sdk/harness-acp library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.