Live › vulnerability › CVE-2026-121558
AuditPilot before commit 4669c93 has a flaw in rag/agentic_rag.py where the project check does not hold, so a user can pass another project's ID. An authenticated user with read access to one project can retrieve knowledge chunks from other projects in the same tenant.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 16:21 UTC. All times on this page are UTC.
Deployments of AuditPilot built before commit 4669c93 that expose the knowledge query or research answer endpoints to users with read:knowledge scope on a project. Users limited to a single project within a shared tenant are the ones who can cross into other projects' data. Single-project deployments or instances without multi-project tenants have little exposure.
No product ranges from the sources yet.
4669c93_metadata_allowed in rag/agentic_rag.py and confirm it validates project_id against the caller's allowed projects4669c93Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.py that allows authenticated users to read other projects' knowledge by supplying project_id. Attackers with read:knowledge scoped to one project can set context.project_id via GET /api/knowledge/query or POST /api/research/answer to retrieve same-tenant project knowledge chunks.
This page as .md · .json · in your agent: get_signal("CVE-2026-121558")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.