CVE-2026-44504— Aegra: Cross-user run injection in /threads/{thread_id}/runs (IDOR)
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-44504
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Aegra: Cross-user run injection in /threads/{thread_id}/runs (IDOR)
Source: NVD (National Vulnerability Database)
Vulnerability Description
Aegra is a drop-in replacement for LangSmith Deployments. Prior to 0.9.7, with multiple authenticated users on a shared instance are vulnerable to a cross-tenant IDOR. Any authenticated attacker, given another user's thread_id, can execute graph runs against the user's thread, read the user's full checkpoint state, and inject arbitrary messages into the user's conversation history. This vulnerability is fixed in 0.9.7.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Aegra 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Aegra是Aegra公司的一个支持构建与编排多步骤智能代理流程的大模型应用平台。 Aegra 0.9.7之前版本存在授权问题漏洞，该漏洞源于共享实例上多个经过身份验证的用户存在跨租户IDOR，任何经过身份验证的攻击者给定其他用户的thread_id后可执行图运行、读取完整检查点状态并向用户对话历史注入任意消息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-44504
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-44504
请登录查看更多情报信息。
- https://github.com/aegra/aegra/security/advisories/GHSA-m98r-6667-4wq7x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2026-44504
IV. Related Vulnerabilities
Same weakness: CWE-285
- CVE-2026-45187
Apache OFBiz: Improper Authorization in Scheduled Job Creati - CVE-2026-8747
Z-BlogPHP Commend Approval c_system_event.php CheckComment i - CVE-2026-8743
Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id impr - CVE-2026-45345
Open WebUI: Missing authorization check at the model update - CVE-2026-45365
Open WebUI: Authenticated users can bypass model access cont
V. Comments for CVE-2026-44504
No comments yet