Plugin-Ai (2.1.0 Through 2.2.41) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/plugin-ai-2.1.0-through-2.2.41/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 10 Nov 2026 02:04:54 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNocoBase plugin-ai: Authorization bypass in getAccessibleAIEmployee (CVE-2026-125397)https://feed.craftedsignal.io/briefs/2026-11-nocobase-auth-bypass/Tue, 10 Nov 2026 02:04:54 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-nocobase-auth-bypass/NocoBase plugin-ai versions 2.1.0 through 2.2.41 contain an authorization bypass vulnerability allowing authenticated users to access and control unauthorized AI employee configurations and tools.NocoBase plugin-ai versions 2.1.0 through 2.2.41 are affected by an authorization bypass vulnerability in the getAccessibleAIEmployee() function. An authenticated user can bypass role-based access controls by providing a specific username parameter, which overrides the intended filter. This allows the attacker to access AI employees that were not assigned to their role.

Impact

Successful exploitation allows an authenticated user to perform unauthorized actions, including:

  • Accessing unassigned AI employees.
  • Executing tools and utilizing permissions associated with restricted AI employees via the dispatch-sub-agent-task tool.
  • Reading sensitive information, including prompts and tool configurations, via the get-ai-employee tool.

Recommendation

  • Upgrade NocoBase plugin-ai to a version later than 2.2.41 to remediate CVE-2026-125397.
  • Audit access logs for the dispatch-sub-agent-task and get-ai-employee API endpoints to identify anomalous usage patterns by unauthorized users.
  • Review user roles and permissions within the NocoBase platform to ensure least privilege principles are enforced.
]]>highadvisory