Authorization Bypass in NocoBase plugin-ai via Role Filter Override

Executive Summary

NocoBase plugin-ai versions 2.1.0 to 2.2.41 have an authorization bypass flaw in the getAccessibleAIEmployee() function. Authenticated users can manipulate role-based access controls by providing a username to override filters, allowing access to AI employees not assigned to them. Attackers exploit this via the dispatch-sub-agent-task tool to run unauthorized AI employees and the get-ai-employee tool to view their prompts and configurations.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check NocoBase plugin-ai versions between 2.1.0 and 2.2.41. Verify if the getAccessibleAIEmployee() function improperly allows username overrides bypassing role filters. Inspect logs for unauthorized access attempts to AI employees via dispatch-sub-agent-task or get-ai-employee tools.

Useful 0 Not Useful 0

Impact Analysis

If you use NocoBase with plugin-ai versions 2.1.0 to 2.2.41, an attacker with valid credentials could access sensitive AI employee data, run unauthorized tasks, or exfiltrate tool configurations and prompts. This could lead to data breaches, privilege escalation, or misuse of AI functionality within your system.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate GDPR by enabling unauthorized access to personal data processed by AI employees. For HIPAA, it may risk exposure of protected health information if AI tools handle such data. Compliance failures could result in legal penalties, reputational damage, and loss of trust due to unauthorized data exposure.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade NocoBase plugin-ai to a version beyond 2.2.41 to address the authorization bypass in getAccessibleAIEmployee(). Ensure all authenticated users are restricted to their assigned roles and disable the dispatch-sub-agent-task tool if not required.

Useful 0 Not Useful 0