Product
NocoBase plugin-ai versions 2.1.0 through 2.2.41 contain an authorization bypass vulnerability allowing authenticated users to access and control unauthorized AI employee configurations and tools.