Threats tagged 'ghsa-662g-qcpv-pf65'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.3	CVE-2026-121558AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in Low2.32026-11-03GCVE DatabaseCVE-2026-121558 AuditPilot versions before commit 4669c93 have an authorization bypass vulnerability in the _metadata_allowed function within rag/agentic_rag.py. This flaw allows authenticated users with read:knowledge permission scoped to one project to access knowledge data from other projects by manipulating the project_id parameter in specific API endpoints. Report on CVE-2026-121558 Vulnerability CWE-639 #ghsa-662g-qcpv-pf65	GCVE Database	2026-11-03

Page 1 of 1