CVE-2026-110611 Details

An authorization bypass vulnerability has been identified in REBUILD versions through 4.5.0, specifically within the AiBot2Controller's chat management endpoints. These endpoints accept a caller-supplied chat ID without verifying ownership, allowing authenticated low-privilege users to manipulate another user's chat data. The vulnerability enables users to read, delete, exfiltrate, or interrupt AI assistant conversations by supplying the target chat ID. This issue arises from the lack of proper authorization checks in the chat management functionality, which is particularly concerning given that the AI assistant is a key feature in the 4.5.0 release.

To address this vulnerability, implement ownership checks for the chat ID parameter in all affected endpoints. Ensure that only the owner of a chat can access or modify it. Additionally, revise the chat management functionality to use privilege-checked service paths that enforce authorization before performing actions on chat records.