CVE-2026-108854: Authorization Bypass Through User-Controlled Key in UnicomAI Wanwu

CVE-2026-108854 describes an authorization bypass vulnerability in UnicomAI's Wanwu product prior to version 0.6.3. Authenticated users can exploit an insecure direct object reference by supplying a numeric apiId to the DELETE /v1/appspace/app/key endpoint, enabling them to delete legacy AppKeys belonging to other users. Attackers can sequentially iterate through key IDs to revoke AppKeys across organizations, causing service disruption for MCP and OpenAPI clients until the affected users generate new keys.

The vulnerability allows authenticated users to revoke legacy AppKeys of other users, potentially disrupting service for MCP and OpenAPI clients relying on those keys. This can lead to denial of service for affected applications until new keys are issued. There is no indication of privilege escalation beyond key deletion or data disclosure.

A fix is available in Wanwu version 0.6.3. Users should upgrade to version 0.6.3 or later to remediate this vulnerability. No vendor advisory was provided, so patch status is based on the affected version range. Until patched, restrict authenticated user permissions to prevent unauthorized key deletions if possible.