Authorization Bypass Vulnerability in Odysseus Embedding Configuration

Odysseus versions prior to commit bf325f6 contain a critical missing authorization vulnerability (CVE-2026-70619). The issue exists within the application's endpoint management routes, which verify that a user has an active session but fail to enforce administrative privileges. By targeting these specific routes, an authenticated non-admin user can manipulate the server-wide embedding backend configuration.

An attacker can overwrite the configuration file and the process environment with a malicious URL. This allows the redirection of all subsequent embedding-related traffic, including chat messages, RAG (Retrieval-Augmented Generation) queries, memory entries, and vault text, to an attacker-controlled destination. Alternatively, an attacker can delete the configuration entirely, resulting in a denial-of-service condition for the embedding functionality. This vulnerability poses a significant risk to data confidentiality and integrity, as it facilitates unauthorized access to sensitive user data and enterprise RAG context.

Impact

Successful exploitation allows for the exfiltration of sensitive RAG data and chat content, potentially exposing intellectual property or PII handled by the embedding backend. Organizations using affected versions of Odysseus are at risk of data leakage and service disruption. The severity is marked as high (CVSS 8.8) given the ease of exploitation for any authenticated user.

Recommendation

• Immediately upgrade Odysseus to commit bf325f6 or higher to resolve the authorization logic flaw.
• Audit application access logs for any unauthorized POST or DELETE requests targeting endpoint configuration management routes initiated by non-administrative service or user accounts.
• Review current embedding backend configurations to ensure no unexpected or unauthorized URLs have been persisted in the application environment or configuration files.