CVE-2026-121558 Details
Description
AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.py that allows authenticated users to read other projects' knowledge by supplying project_id. Attackers with read:knowledge scoped to one project can set context.project_id via GET /api/knowledge/query or POST /api/research/answer to retrieve same-tenant project knowledge chunks.
A vulnerability allowing authorization bypass has been identified in AuditPilot, prior to commit 4669c93. This issue resides in the 'rag/agentic_rag.py' file, specifically within the '_metadata_allowed' function. The vulnerability enables authenticated users to access knowledge from other projects by manipulating the 'project_id'. Exploitation is possible for users with 'read:knowledge' permissions for a specific project, who can use the '/api/knowledge/query' or '/api/research/answer' endpoints to retrieve knowledge chunks from the same tenant.
Users can update to the latest version of AuditPilot, which includes a fix for this vulnerability. After updating, it is recommended to review and adjust any project-specific permissions as needed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 3, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-639 | Authorization Bypass Through User-Controlled Key | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| AuditPilot | >= 0, < 4669c93f3a7403a0e242bef14d771beef0b4356b |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 3, 2026 | New CVE Received | [email protected] |