CVE-2026-54519 Details
Description
AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory _id without verifying through the related Agent that the record belongs to req.user. An authenticated attacker who knows or obtains another user's identifiers can read victim AgentMemory content, including conversation history, agent context, task data, embeddings, and metadata, delete an individual victim memory, or clear all memory belonging to a victim agent. This breaks tenant isolation and causes unauthorized disclosure and data loss. This issue is fixed in version 0.9.1.
A vulnerability in AI Agent Automation versions prior to 0.9.1 allows authenticated users to access and manipulate another user's agent memory. The issue arises because the application fails to verify ownership of memory records before performing actions such as listing, deleting, or clearing memory. An authenticated attacker who knows or obtains a victim's agent ID or memory ID can read sensitive information, including conversation history and metadata, delete specific memory records, or clear all memory for a victim's agent. This breach of tenant isolation leads to unauthorized data disclosure and loss.
Users can update to AI Agent Automation version 0.9.1, which includes the necessary ownership checks to prevent cross-user memory access. Instructions for downloading this version are available on the project's GitHub releases page.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 17, 2026CISA-ADP
Assessed Sep 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/vmDeshpande/ai-agent-automation/security/advisories/GHSA-qv97-83w4-ff86 | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/vmDeshpande/ai-agent-automation/commit/96b31c216f6f670e64584f3623c07ac54461e703 | [email protected] | Source CodeVendor |
| https://github.com/vmDeshpande/ai-agent-automation/releases/tag/v0.9.1 | [email protected] | Release NotesVendor |
| https://github.com/vmDeshpande/ai-agent-automation/security/advisories/GHSA-qv97-83w4-ff86 | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| vmDeshpande AI Agent Automation | <= 0.8.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 22, 2026 | CVE Modified | CISA-ADP |
| Sep 17, 2026 | New CVE Received | [email protected] |