CVE-2026-125386 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
langchain4j-aideepin through 3.32.0 has an insecure direct object reference in CharacterMessageController. An authenticated user who supplies another user's message UUID to the knowledge-embedding-ref, memory-embedding-ref, or graph-ref endpoints can read that user's knowledge-base chunks, long-term memory text, and knowledge-graph data.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running langchain4j-aideepin through 3.32.0 with multiple user accounts, where users' knowledge bases and memory are stored in the same instance. An attacker needs a valid account and a target message UUID, so single-user deployments carry less risk.
Not affected if single-user-deployment, version-above-3.32.0
Who cares langchain4j-aideepin, self-hosted
3.32.0.langchain4j-aideepin through 3.32.0 contains an insecure direct object reference vulnerability in CharacterMessageController that allows authenticated users to access other users' message references due to missing owner checks. Attackers can supply another user's message uuid to the knowledge-embedding-ref, memory-embedding-ref, or graph-ref endpoints to retrieve knowledge-base chunks, long-term memory text, and knowledge-graph data.
This page as .md · .json · CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.