CVE-2026-115718 Details
Description
Frappe Builder versions 1.33.0 before 1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoint that allows any authenticated non-Guest session to invoke LLM completions without proper permission checks. Attackers can call the improve_prompt API to leverage the site owner's stored OpenRouter API key via resolve_api_key, consuming paid LLM credits and effectively turning the site into a free LLM proxy.
A missing authorization vulnerability has been identified in Frappe Builder versions 1.33.0 prior to 1.36.0. The issue resides in the improve_prompt endpoint, where any authenticated user, except Guests, can invoke LLM completions without proper permission checks. This vulnerability allows users to exploit the site owner's OpenRouter API key, accessed through the resolve_api_key function, thereby consuming paid LLM credits. As a result, the site effectively acts as a free LLM proxy.
Users can upgrade to Frappe Builder version 1.36.0, which removes the vulnerable improve_prompt endpoint. This version requires Frappe 16.36.1 or newer. Alternatively, the AI provider key can be removed from Builder's AI settings until the site is upgraded.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 26, 2026CISA-ADP
Assessed Oct 26, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/frappe/builder/releases/tag/v1.36.0 | [email protected] | Release NotesVendor |
| https://github.com/frappe/builder/security/advisories/GHSA-58mj-c563-p78w | [email protected] | AdvisoryRemedyVendor |
| https://www.vulncheck.com/advisories/frappe-builder-before-missing-authorization-via-improve-prompt | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Frappe Builder | >= 1.33.0, < 1.36.0 (semver) |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 8, 2026 | CVE Modified | [email protected] |
| Oct 26, 2026 | CVE Modified | CISA-ADP |
| Oct 26, 2026 | New CVE Received | [email protected] |