Threat database

REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commentList that allows authenticated low-privileged users to read task comments without project membership checks. Attackers can supply the id of a task in a private project to the /project/comments/list endpoint to retrieve its comment content and attachment references.

CVE-2026-110611 is an authorization bypass vulnerability in the getrebuild product 'rebuild' through version 4.5.0. It affects the AiBot2Controller /aibot2 endpoints, which improperly trust a caller-supplied chatid without verifying ownership. Authenticated users with low privileges can exploit this flaw to read, delete, exfiltrate, or interrupt AI assistant conversations belonging to other users.

CVE-2026-102249 is a medium severity vulnerability in REBUILD up to version 4.4.11. It involves missing authorization checks in the /commons/file-editor-save endpoint due to manipulation of the url/fileKey argument. This flaw allows remote attackers to exploit the system without authentication. Public exploit code is available, but no vendor response or patch has been provided.

A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Login Endpoint. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Rebuild up to 3.5.5 and classified as problematic. This issue affects the function QiniuCloud.getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to information disclosure. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252455.