CVE-2026-85669 Details

A vulnerability exists in Potpie versions through 2.0.0, where the application fails to verify user ownership on the POST /conversations/{conversation_id}/code-changes/sync endpoint. This oversight allows authenticated users to inject arbitrary file changes into other users' conversations by exploiting the lack of ownership validation. The injected changes are subsequently processed by the affected user's agent, leading to unauthorized modifications in their coding environment.

To address this vulnerability, implement an ownership verification step in the sync_code_change_from_local function. This can be done by using the ConversationController to check if the authenticated user owns the conversation before allowing any code changes to be synced.