CVE-2026-125397— NocoBase plugin-ai 2.1.0 through 2.2.41 Authorization Bypass via Sub-Agent Username Override

Quick assessment

Affected

nocobase nocobase

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

NocoBase 的 plugin-ai 插件在 2.1.0 至 2.2.41 版本中存在一个授权绕过漏洞。该漏洞位于函数中，允许已认证用户通过提供用户名来覆盖基于角色的过滤条件，从而访问未分配给他们的 AI 员工。攻击者可利用工具以未授权身份运行 AI 员工，并调用其工具及权限；同时，还可使用接口读取这些 AI 员工的提示词（prompts）及工具配置信息。

CVSS 7.1 · High Updated Nov 10, 2026

Possible ATT&CK Techniques 3 AI

T1003 · OS Credential Dumping T1068 · Exploitation for Privilege Escalation T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

NocoBase plugin-ai 2.1.0 through 2.2.41 Authorization Bypass via Sub-Agent Username Override

Source: CVE Program / CVE List V5

Vulnerability Description

NocoBase plugin-ai 2.1.0 through 2.2.41 contains an authorization bypass vulnerability in getAccessibleAIEmployee() that lets authenticated users access unassigned AI employees by overriding the role-derived filter with a supplied username. Attackers can use the dispatch-sub-agent-task tool to run ungranted AI employees with their tools and permissions, and get-ai-employee to read their prompts and tool configuration.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

授权机制不正确

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
nocobase	nocobase	2.1.0 ~ 2.2.41	-

II. Public POCs for CVE-2026-125397

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-125397

请登录查看更多情报信息。

Vendor Pages for CVE-2026-125397 (1)

🔗 GitHub - nocobase/nocobase: NocoBase is an open-source AI + no-code platform for building business systems fast. Instead of generating everything from scratch, AI works on top of production-proven infrastructure and a WYSIWYG no-code interface, so you get both speed and reliability. · GitHub product

Other References for CVE-2026-125397 (4)

https://github.com/nocobase/nocobase/blob/v2.2.41/packages/plugins/@nocobase/plugin-ai/src/ai/tools/sub-agents/shared.ts#L26-L33 technical-description
https://github.com/nocobase/nocobase/commit/ae5a05954e20608de510c33847089269cb37411a patch
https://github.com/nocobase/nocobase/pull/11009 issue-tracking patch
https://www.vulncheck.com/advisories/nocobase-plugin-ai-2.1.0-through-2.2.41-authorization-bypass-via-sub-agent-username-override third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-125397

IV. Related Vulnerabilities

Same product: nocobase

Same vendor: nocobase

Same weakness: CWE-863