In wacrm versions 0.7.0 and earlier, the profiles_update row-level security policy permits authenticated users to alter their account_role and account_id, enabling privilege escalation and tenant switching. Furthermore, the match_ai_knowledge_fts and match_ai_knowledge_semantic functions run as SECURITY DEFINER and accept a caller-controlled p_account_id parameter without verifying account membership, allowing authenticated users to read knowledge-base chunks from other tenants. The issue is addressed by a specific commit that corrects these security flaws.

An attacker with authenticated access can escalate privileges to higher roles or switch tenants, gaining unauthorized access to or modification of tenant resources. Additionally, they can read sensitive knowledge-base data belonging to other tenants. The vulnerability impacts confidentiality, integrity, and availability of tenant data, rated critical with a CVSS score of 9.9.

A fix is available and has been applied in a commit identified as e01f7ed37184f972ace8fb2da5c3e37e56a6050f. Users should upgrade to a version including this commit or later to remediate the vulnerability. No vendor advisory is provided, so verify the fix status in the official repository or release notes.