CVE-2026-121558
Deferred Deferred - Pending Action

Authorization Bypass in AuditPilot Exposes Project Knowledge

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: VulnCheck

Description
AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.py that allows authenticated users to read other projects' knowledge by supplying project_id. Attackers with read:knowledge scoped to one project can set context.project_id via GET /api/knowledge/query or POST /api/research/answer to retrieve same-tenant project knowledge chunks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-121558
EUVD
EUVD-2026-115903

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Ricky-7-Yan intelligent-audit-system 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authorization bypass in AuditPilot before commit 4669c93. It allows authenticated users to read knowledge from other projects by manipulating the project_id parameter in specific API endpoints. Attackers with limited read access can exploit this to retrieve sensitive information from same-tenant projects.

Detection Guidance

Check API endpoints /api/knowledge/query and POST /api/research/answer for unauthorized project_id parameter usage. Monitor logs for repeated requests with varying project_id values from the same user.

Impact Analysis

If you use AuditPilot, attackers could access confidential project knowledge they shouldn't have permission to see. This could lead to data leaks, intellectual property theft, or compliance violations depending on the exposed information.

Compliance Impact

This vulnerability could violate data protection requirements in GDPR and HIPAA by allowing unauthorized access to sensitive personal or health information. Organizations using AuditPilot may fail compliance audits if this issue isn't addressed.

Mitigation Strategies

Update to the latest commit 4669c93 or later. Implement strict input validation to reject project_id parameter modifications. Review user permissions to ensure read:knowledge scope is project-specific.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-121558. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...