al-ice analyzes gating duality failures in two CVEs in MoviePilot and IntentKit
NVD published two CVEs with status Received within one minute around 02:20 UTC on October 15, 2026, pointing to Agent tool gating failures in MoviePilot and IntentKit respectively. According to Lasso Security's analysis, CVE-2026-77931 (CVSS 8.8) affects MoviePilot up to 3.1.5; untrusted content such as web pages and torrent metadata read by the assistant can, via prompt injection, cause the model to set execute_command's confirm_dangerous to true on its own, bypassing command validation and executing arbitrary system commands in an administrator session. CVE-2026-76066 (CVSS 7.5) affects IntentKit up to 2.6.3; private tools are only hidden from the model-facing tool manifest, while the executor still validates against the full tool registry, so unauthenticated callers can invoke tools by providing the name and parameters of a removed tool, including owner-only tools such as wallet transfers.
The article compares two CVEs disclosed around the same time, pointing out that security checks that do not land at the execution point are merely prompts, which can serve as a reference for agent tool authorization design.