CVE-2026-77517

Summary

The flaw allows a workspace user to read or modify content in another user's knowledge base by exploiting improperly authorized document and paragraph routes. This matters because it breaches data isolation and confidentiality.

Exploitability

Exploitation is moderately easy if an attacker has access to the victim’s UUID, as no fixed version addresses the issue.

Blast radius

If exploited, this could lead to significant data leakage or unauthorized modifications across multiple knowledge bases within the system.

Prioritized remediation

Implement proper authorization checks to ensure that only relevant users can access and modify content in their respective knowledge bases.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.