{"id":"CVE-2026-129129","kind":"vulnerability","aliases":["CVE-2026-129129"],"related":[],"title":"AiSOC: unauthenticated enrichment lookups let attackers use paid threat-intel quota","description":"AiSOC 12.1.0 before 23.3.0 contains a missing authentication vulnerability that allows unauthenticated attackers to query the enrichment service through Next.js console rewrite routes. Attackers can send requests to /api/v1/enrichment/lookup or /api/v1/enrichment/bulk to retrieve threat-intelligence results and set force to true to consume commercial provider API quota.","summary":"AiSOC versions 12.1.0 before 23.3.0 expose the enrichment service through Next.js console rewrite routes without requiring authentication. An unauthenticated attacker can query threat-intelligence results and force fresh lookups to consume the operator's commercial provider API quota.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","aisoc","next.js","self-hosted"],"not_affected_if":["console-behind-auth","version-23.3.0-or-later"],"how_to_check":"- Confirm the AiSOC version running, for example in the deployment image tag or release notes, against `12.1.0` and `23.3.0`.\n- Test whether `/api/v1/enrichment/lookup` or `/api/v1/enrichment/bulk` answers without a session or token.","fix":"- AiSOC: move to `23.3.0` or later, per the NVD range.","status":"open","published_at":"2026-11-13T17:17:30+00:00","first_seen_at":"2026-11-13T17:48:01+00:00","triaged_at":"2026-11-13T17:48:58+00:00","updated_at":"2026-11-13T17:48:58+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-11-13T17:48:58Z","model":"claude-haiku-5-5","output":{"fix":"- AiSOC: move to `23.3.0` or later, per the NVD range.","reach":"internet","title":"AiSOC: unauthenticated enrichment lookups let attackers use paid threat-intel quota","impact":"low","summary":"AiSOC versions 12.1.0 before 23.3.0 expose the enrichment service through Next.js console rewrite routes without requiring authentication. An unauthenticated attacker can query threat-intelligence results and force fresh lookups to consume the operator's commercial provider API quota.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["aisoc","self-hosted","next.js"],"confidence":0.7,"fix_status":"available","needs_auth":"no","worst_case":"Anyone can run enrichment lookups and drain commercial threat-intel API quota","analyst_note":"Confirm whether the console is internet-reachable by default and check the vendor advisory and patch linked from the signal for the exact fixed version and any configuration step.","how_to_check":"- Confirm the AiSOC version running, for example in the deployment image tag or release notes, against `12.1.0` and `23.3.0`.\n- Test whether `/api/v1/enrichment/lookup` or `/api/v1/enrichment/bulk` answers without a session or token.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["version-23.3.0-or-later","console-behind-auth"],"who_is_affected":"Teams running AiSOC between 12.1.0 and 23.3.0 where the console is reachable by clients that have no login. The exposed path is the Next.js console rewrite to the enrichment API, so deployments that keep the console behind authentication or network controls are less exposed. Teams on 23.3.0 or later are not affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000799,"input_tokens":4663,"output_tokens":666,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-129129':15A,18A '-2026':14A,17A '/api/v1/enrichment/bulk':96C '/api/v1/enrichment/lookup':94C '12.1.0':29B,67C '23.3.0':31B,69C 'ai':20B 'ai-tool':19B 'aisoc':1A,22B,27B,66C 'allow':76C 'api':64B,112C 'attack':6A,46B,78C,89C 'authent':43B,73C 'commerci':62B,110C 'consol':38B,86C 'consum':58B,109C 'contain':70C 'cve':13A,16A 'enrich':3A,34B,82C 'expos':32B 'forc':54B,105C 'fresh':55B 'host':26B 'intel':11A 'intellig':51B,101C 'let':5A 'lookup':4A,56B 'miss':72C 'next.js':23B,37B,85C 'oper':60B 'paid':8A 'provid':63B,111C 'queri':48B,80C 'quota':12A,65B,113C 'request':92C 'requir':42B 'result':52B,102C 'retriev':98C 'rewrit':39B,87C 'rout':40B,88C 'self':25B 'self-host':24B 'send':91C 'servic':35B,83C 'set':104C 'threat':10A,50B,100C 'threat-intel':9A 'threat-intellig':49B,99C 'tool':21B 'true':107C 'unauthent':2A,45B,77C 'use':7A 'version':28B 'vulner':74C 'without':41B","nicknames":[],"mitigations":[],"who_affected":"Teams running AiSOC between 12.1.0 and 23.3.0 where the console is reachable by clients that have no login. The exposed path is the Next.js console rewrite to the enrichment API, so deployments that keep the console behind authentication or network controls are less exposed. Teams on 23.3.0 or later are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aisoc","aitooling","medium","nextjs","selfhosted"],"campaign_type":null,"search_a":"'-129129':15A,18A '-2026':14A,17A 'aisoc':1A 'attack':6A 'cve':13A,16A 'enrich':3A 'intel':11A 'let':5A 'lookup':4A 'paid':8A 'quota':12A 'threat':10A 'threat-intel':9A 'unauthent':2A 'use':7A","search_b":"'12.1.0':29B '23.3.0':31B 'ai':20B 'ai-tool':19B 'aisoc':22B,27B 'api':64B 'attack':46B 'authent':43B 'commerci':62B 'consol':38B 'consum':58B 'enrich':34B 'expos':32B 'forc':54B 'fresh':55B 'host':26B 'intellig':51B 'lookup':56B 'next.js':23B,37B 'oper':60B 'provid':63B 'queri':48B 'quota':65B 'requir':42B 'result':52B 'rewrit':39B 'rout':40B 'self':25B 'self-host':24B 'servic':35B 'threat':50B 'threat-intellig':49B 'tool':21B 'unauthent':45B 'version':28B 'without':41B","search_c":"'/api/v1/enrichment/bulk':96C '/api/v1/enrichment/lookup':94C '12.1.0':67C '23.3.0':69C 'aisoc':66C 'allow':76C 'api':112C 'attack':78C,89C 'authent':73C 'commerci':110C 'consol':86C 'consum':109C 'contain':70C 'enrich':82C 'forc':105C 'intellig':101C 'miss':72C 'next.js':85C 'provid':111C 'queri':80C 'quota':113C 'request':92C 'result':102C 'retriev':98C 'rewrit':87C 'rout':88C 'send':91C 'servic':83C 'set':104C 'threat':100C 'threat-intellig':99C 'true':107C 'unauthent':77C 'vulner':74C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T21:02:22+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-129129","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-129129","severity":null,"published_at":"2026-11-13T17:17:30+00:00","modified_at":"2026-11-13T17:17:30+00:00","first_seen_at":"2026-11-13T17:48:01+00:00","fetched_at":"2026-11-13T17:48:01+00:00","note":null}],"documents":[{"id":148126,"url":"https://github.com/beenuar/AiSOC/commit/3a853d16b09a4c59fb4fc3fbe20938bb4c306be7","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":148127,"url":"https://github.com/beenuar/AiSOC/releases/tag/v23.3.0","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":148128,"url":"https://github.com/beenuar/AiSOC/security/advisories/GHSA-qf6m-hgwv-65f9","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-11-12T21:02:22+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"},{"id":148129,"url":"https://www.vulncheck.com/advisories/aisoc-12.1.0-before-23.3.0-missing-authentication-via-enrichment-console-proxy-routes","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}