Attack Chain

1. The attacker identifies an instance of @eeacms/volto-chatbot accessible over the network.
2. The attacker sends a crafted, unauthenticated HTTP request to the /_v1_da/ endpoint on the Volto server.
3. The proxyMiddleware intercepts the request without requiring authentication or session validation.
4. The middleware extracts the attacker-supplied path from the request URL.
5. The middleware constructs an upstream URL by appending the attacker's path to the configured DANSWER_URL.
6. The middleware silently attaches the server-side DANSWER_API_KEY or session cookie to the outbound request headers.
7. The middleware forwards the request to the Danswer API, which processes the action as a privileged command from the service account.

Impact

Successful exploitation allows unauthenticated attackers to perform actions as the Danswer service account. Depending on the service account's permissions, this may lead to the unauthorized disclosure of sensitive documents and conversation history, or the mutation of system state, such as deleting users or creating chat sessions.

Recommendation

• Upgrade @eeacms/volto-chatbot to a patched version once released by the maintainers.
• If a patch is unavailable, immediately restrict network access to the Volto server to trusted internal segments.
• Implement a Web Application Firewall (WAF) rule to block all requests to the /_v1_da/ path.
• Audit Danswer API access logs for requests originating from the Volto server IP address with suspicious or administrative paths (e.g., /admin/).