---
id: "CVE-2026-125386"
page: "https://infrastack.ai/live/CVE-2026-125386"
kind: "vulnerability"
aliases: ["CVE-2026-125386"]
title: "langchain4j-aideepin: missing owner check exposes other users' message data"
severity: "medium"
cvss: 6.0
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "langchain4j-aideepin", "self-hosted"]
not_affected_if: ["single-user-deployment", "version-above-3.32.0"]
published_at: "2026-11-10T00:17:11+00:00"
first_seen_at: "2026-11-10T00:28:43+00:00"
updated_at: "2026-11-10T00:30:23+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-125386", "first_seen_at": "2026-11-10T00:28:43+00:00"}]
exploit_sources: []
---

# langchain4j-aideepin: missing owner check exposes other users' message data

Link for people: https://infrastack.ai/live/CVE-2026-125386 (this .md is for agents)

langchain4j-aideepin through 3.32.0 has an insecure direct object reference in CharacterMessageController. An authenticated user who supplies another user's message UUID to the knowledge-embedding-ref, memory-embedding-ref, or graph-ref endpoints can read that user's knowledge-base chunks, long-term memory text, and knowledge-graph data.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the langchain4j-aideepin version deployed; affected versions are through `3.32.0`.
- Look for the CharacterMessageController endpoints knowledge-embedding-ref, memory-embedding-ref, and graph-ref in the deployed application.

## Fix

- Patch version: unknown (the linked patch is on github.com; the sources do not state the fixed version)

## Timeline

- 2026-11-10T00:28:43+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-125386

## Documents

- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/langchain4j-aideepin-through-3.32.0-idor-via-character-message-reference-endpoints
- [fix] Patch: github.com https://github.com/moyangzhan/langchain4j-aideepin/commit/483499b1a6b4a27d856f85d88c28ae6152660953

## From the sources

langchain4j-aideepin through 3.32.0 contains an insecure direct object reference vulnerability in CharacterMessageController that allows authenticated users to access other users' message references due to missing owner checks. Attackers can supply another user's message uuid to the knowledge-embedding-ref, memory-embedding-ref, or graph-ref endpoints to retrieve knowledge-base chunks, long-term memory text, and knowledge-graph data.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_