CVE-2026-121558— AuditPilot before commit 4669c93 RAG Project-Scope Authorization Bypass via project_id

Quick assessment

Affected

Ricky-7-Yan intelligent-audit-system

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 commit 4669c93 之前的 AuditPilot 版本中，文件里的函数存在授权绕过漏洞。该漏洞允许已认证用户通过指定参数，读取其他项目的知识库内容。具体来说，仅拥有单个项目权限的攻击者，可以通过向或接口发送请求，并在请求中设置，从而获取同一租户下其他项目的知识库片段。

CVSS 4.3 · Medium Updated Nov 03, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

AuditPilot before commit 4669c93 RAG Project-Scope Authorization Bypass via project_id

Source: CVE Program / CVE List V5

Vulnerability Description

AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.py that allows authenticated users to read other projects' knowledge by supplying project_id. Attackers with read:knowledge scoped to one project can set context.project_id via GET /api/knowledge/query or POST /api/research/answer to retrieve same-tenant project knowledge chunks.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

通过用户控制密钥绕过授权机制

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Ricky-7-Yan	intelligent-audit-system	0 ~ 4669c93f3a7403a0e242bef14d771beef0b4356b	-

II. Public POCs for CVE-2026-121558

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-121558

请登录查看更多情报信息。

Other References for CVE-2026-121558 (6)

https://www.cve.org/CVERecord?id=CVE-2026-121558

IV. Related Vulnerabilities

Same weakness: CWE-639