Threat database

UnicomAI Wanwu versions up to 0.6.5 contain an authorization bypass vulnerability that allows authenticated users to mint AppKeys tied to other users' MCP servers. This enables attackers to open MCP sessions and invoke server tools using the victim's upstream authentication. The vulnerability has a low CVSS score of 2.3, indicating limited impact and complexity.

UnicomAI Wanwu versions up to 0.6.5 have a missing authorization vulnerability that allows any authenticated user to revoke other users' AppKeys for arbitrary applications via the unpublish endpoint. This flaw enables attackers to delete API keys across organizations, disrupting client access to MCP and OpenAPI services. The vulnerability has a medium severity with a CVSS score of 5.3.

Wanwu versions before 0.6.3 have an insecure direct object reference vulnerability that allows any authenticated user to delete other users' legacy AppKeys by specifying a numeric apiId. This flaw enables attackers to revoke AppKeys across organizations by iterating through sequential key IDs, disrupting MCP and OpenAPI clients until new keys are issued by the owners.

UnicomAI Wanwu versions before 0.6.3 have an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants' applications by manipulating the appId parameter. This flaw enables attackers to send DELETE requests with guessed sequential assistant IDs to remove victims' applications, workflows, conversations, and related data permanently.