CVE-2026-125397 Details
Description
NocoBase plugin-ai 2.1.0 through 2.2.41 contains an authorization bypass vulnerability in getAccessibleAIEmployee() that lets authenticated users access unassigned AI employees by overriding the role-derived filter with a supplied username. Attackers can use the dispatch-sub-agent-task tool to run ungranted AI employees with their tools and permissions, and get-ai-employee to read their prompts and tool configuration.
An authorization bypass vulnerability has been identified in the NocoBase Plugin-AI, specifically in versions 2.1.0 through 2.2.41. The vulnerability resides in the 'getAccessibleAIEmployee()' function, where authenticated users can access unassigned AI employees by manipulating the role-based filter with a chosen username. Exploitation of this vulnerability allows attackers to use the 'dispatch-sub-agent-task' tool to operate unassigned AI employees with their respective tools and permissions, and to utilize 'get-ai-employee' to access the AI employees' prompts and tool configurations.
Users can update to NocoBase Plugin-AI version 2.2.42 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 10, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| NocoBase plugin-ai | >= 2.1.0, <= 2.2.41 (semver) |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 10, 2026 | New CVE Received | [email protected] |