Threats tagged 'ghsa-m2qp-332m-87w4'

agentgpt version 1.0.0 has an incorrect access control vulnerability in the agentRouter.ts file. This flaw allows external callers to specify an object or tenant identifier and access data without proper ownership, tenant, workspace, or membership verification. The vulnerability has a critical severity with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.