Description
atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the _estimate_batch_cost function that returns zero cost for unknown models not in the pricing table. Attackers can configure deployments with unknown model identifiers to bypass daily cost caps and exceed budget limits in parallel batch operations.
Published: 2026-09-15
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Cost Guardrail Bypass
Action: Patch Now
AI Analysis

Impact

The vulnerability lies in a cost‑guardrail bypass within the _estimate_batch_cost function of atomic‑agents‑stack; when an unknown model identifier is supplied, the function incorrectly returns a zero‑cost value. This allows attackers to configure deployments using arbitrary model names that are circumvent.

Affected Systems

The flaw affects dep0we atomic‑agents‑stack versions earlier than 1.1.0. Any instance deploying with a model identifier absent from the built‑in pricing table is susceptible.

Risk and Exploitability

The CVSS score of 7.1 suggests a moderate severity vulnerability. The EPSS score is below 1% and the flaw is not listed in the CISA KEV table, implying no confirmed exploits yet. Likely exploitation requires administrative or deployment‑configuration access, to supply the unknown model identifiers. If successfully abused and violate budget controls.

Generated by OpenCVE AI on September 20, 2026 at 16:08 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade atomic‑agents‑stack to version 1.1.0 or later.
  • Restrict deployment configuration to model identifiers that exist in the pricing table and validate any new identifiers against the table before cost estimation.
  • Deploy monitoring or alerting on cost spikes and budget threshold violations to detect and respond to potential guardrail bypass events.

Generated by OpenCVE AI on September 20, 2026 at 16:08 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 17 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Dep0we
Dep0we atomic-agents-stack
Vendors & Products Dep0we
Dep0we atomic-agents-stack

Thu, 17 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 15 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Description atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the _estimate_batch_cost function that returns zero cost for unknown models not in the pricing table. Attackers can configure deployments with unknown model identifiers to bypass daily cost caps and exceed budget limits in parallel batch operations.
Title atomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown Model
Weaknesses CWE-770
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Dep0we Atomic-agents-stack
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-17T15:15:25.383Z

Reserved: 2026-09-15T11:10:41.354Z

Link: CVE-2026-91987

cve-icon Vulnrichment

Updated: 2026-09-17T15:15:19.556Z

cve-icon NVD

Status : Deferred

Published: 2026-09-15T16:17:57.300

Modified: 2026-09-24T20:48:01.433

Link: CVE-2026-91987

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T16:15:18Z

Weaknesses
  • CWE-770

    Allocation of Resources Without Limits or Throttling