CVE-2026-85693 Details

A vulnerability exists in Chatbot UI's retrieval API that allows authenticated users to bypass authorization and access private file content of other users. This is achieved by supplying arbitrary file UUIDs, which the API accepts without proper validation of ownership. The issue arises because the endpoint uses a service-role Supabase client that ignores row-level security, enabling access to indexed content chunks from victim files through manipulated POST requests.

The vulnerability can be remediated by stopping the use of the service-role client for this request. Instead, the request-scoped Supabase client should be used to ensure that row-level security is applied. Alternatively, the matching RPCs can be modified to include ownership checks or the route can be audited to prevent similar vulnerabilities.