Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-54519— AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion

Quick assessment

Affected
vmDeshpande ai-agent-automation
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

AI Agent Automation 是一个模块化的 AI 智能体工作流自动化平台，支持调度器、工具集成和可观测性功能。在版本 0.9.1 之前，文件 中虽然对请求进行了身份验证，但 、 和 等函数直接使用调用者提供的 或内存记录 ，而未通过关联的 Agent 对象验证该记录是否确实属于当前请求用户（ ）。 这意味着，任何已认证的恶意用户只要知道或获取到其他用户的标识符，就可以： 读取受害者的 AgentMemory 内容，包括对话历史、智能体上下文、任务数据、嵌入向量（embeddings）及元数据； 删除受害

CVSS 8.8 · High

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-54519

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion
Source: CVE Program / CVE List V5
Vulnerability Description
AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory _id without verifying through the related Agent that the record belongs to req.user. An authenticated attacker who knows or obtains another user's identifiers can read victim AgentMemory content, including conversation history, agent context, task data, embeddings, and metadata, delete an individual victim memory, or clear all memory belonging to a victim agent. This breaks tenant isolation and causes unauthorized disclosure and data loss. This issue is fixed in version 0.9.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
vmDeshpande ai-agent-automation < 0.9.1 -

II. Public POCs for CVE-2026-54519

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-54519

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-54519 (1)

Other References for CVE-2026-54519 (2)

IV. Related Vulnerabilities

Same product: ai-agent-automation
Same vendor: vmDeshpande
Same weakness: CWE-862

V. Comments for CVE-2026-54519

No comments yet

Leave a comment