CVE-2026-51867

Summary

The flaw allows an attacker to bypass access controls and gain unauthorized access to sensitive data, which can lead to data breaches and loss of confidentiality.

Exploitability

Exploitation is relatively straightforward given the externally reachable path and the lack of binding on the object or tenant identifier.

Blast radius

If exploited, the impact could be severe, leading to unauthorized data access and potential data exfiltration across the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to agentgpt v1.0.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.