CVE-2026-108853: Authorization Bypass Through User-Controlled Key in UnicomAI Wanwu

CVE-2026-108853 describes an authorization bypass vulnerability in UnicomAI Wanwu prior to version 0.6.3. Authenticated users with low privileges can exploit an insecure direct object reference by supplying arbitrary appId values in DELETE requests to the /v1/appspace/app endpoint. This allows them to delete agent or RAG applications belonging to other tenants, including all related workflows and data. The vulnerability arises from insufficient access control checks on user-supplied keys identifying applications.

Exploitation of this vulnerability enables attackers with low privileges to permanently delete applications and associated data of other tenants. This results in data loss and disruption of services for affected users. The vulnerability does not require user interaction and can be triggered remotely over the network.

A fixed version 0.6.3 or later should be applied to remediate this vulnerability. Since the affected versions are prior to 0.6.3, upgrading to 0.6.3 or newer is recommended. No vendor advisory or patch link is provided in the input; therefore, verify patch availability with the vendor. Until patched, restrict access to authenticated users and monitor for suspicious DELETE requests targeting appIds not owned by the requester.