The vulnerability in odysseus prior to commit bf325f6 is a missing authorization control on certain endpoint management routes. Although these routes verify that a user is authenticated, they do not enforce that the user has admin privileges. As a result, authenticated non-admin users can overwrite the embedding backend configuration with a URL they control or delete the configuration entirely. This can cause sensitive embedding operations—including chat messages, retrieval-augmented generation (RAG) queries, memory entries, and vault text—to be transmitted in plaintext to an attacker-controlled endpoint, or disrupt embedding services for all users.

An attacker with authenticated non-admin access can manipulate the embedding backend configuration, potentially exfiltrating sensitive data in plaintext to an attacker-controlled server or causing denial of embedding services by deleting the configuration. This compromises confidentiality and availability of embedding-related operations within odysseus.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to authenticated users and monitor for unauthorized configuration changes. Avoid granting non-admin users access to management endpoints.