{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/plugin-ai-2.1.0-through-2.2.41/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:nocobase:plugin-ai:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-125397"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["plugin-ai (2.1.0 through 2.2.41)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["NocoBase"],"content_html":"\u003cp\u003eNocoBase plugin-ai versions 2.1.0 through 2.2.41 are affected by an authorization bypass vulnerability in the \u003ccode\u003egetAccessibleAIEmployee()\u003c/code\u003e function. An authenticated user can bypass role-based access controls by providing a specific username parameter, which overrides the intended filter. This allows the attacker to access AI employees that were not assigned to their role.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated user to perform unauthorized actions, including:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAccessing unassigned AI employees.\u003c/li\u003e\n\u003cli\u003eExecuting tools and utilizing permissions associated with restricted AI employees via the \u003ccode\u003edispatch-sub-agent-task\u003c/code\u003e tool.\u003c/li\u003e\n\u003cli\u003eReading sensitive information, including prompts and tool configurations, via the \u003ccode\u003eget-ai-employee\u003c/code\u003e tool.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade NocoBase plugin-ai to a version later than 2.2.41 to remediate CVE-2026-125397.\u003c/li\u003e\n\u003cli\u003eAudit access logs for the \u003ccode\u003edispatch-sub-agent-task\u003c/code\u003e and \u003ccode\u003eget-ai-employee\u003c/code\u003e API endpoints to identify anomalous usage patterns by unauthorized users.\u003c/li\u003e\n\u003cli\u003eReview user roles and permissions within the NocoBase platform to ensure least privilege principles are enforced.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-10T02:04:54Z","date_published":"2026-11-10T02:04:54Z","id":"https://feed.craftedsignal.io/briefs/2026-11-nocobase-auth-bypass/","summary":"NocoBase plugin-ai versions 2.1.0 through 2.2.41 contain an authorization bypass vulnerability allowing authenticated users to access and control unauthorized AI employee configurations and tools.","title":"NocoBase plugin-ai: Authorization bypass in getAccessibleAIEmployee (CVE-2026-125397)","url":"https://feed.craftedsignal.io/briefs/2026-11-nocobase-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Plugin-Ai (2.1.0 Through 2.2.41)","version":"https://jsonfeed.org/version/1.1"}