Executive Summary

CVE-2026-27595 is a critical security vulnerability in the Parse Dashboard software, specifically affecting versions 7.3.0-alpha.42 through 9.0.0-alpha.7. The issue lies in the AI Agent API endpoint (POST /apps/:appId/agent), which lacks proper authentication.

Because of this missing authentication, unauthenticated remote attackers can send requests to this endpoint and perform arbitrary read and write operations on any connected Parse Server database using the master key.

This vulnerability is due to missing authentication for a critical function (classified as CWE-306). The agent feature is opt-in, so dashboards without an agent configuration are not affected.

The issue was fixed in version 9.0.0-alpha.8 by adding authentication, CSRF validation, and per-app authorization middleware to the agent endpoint.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows unauthenticated remote attackers to perform arbitrary read and write operations on any connected Parse Server database using the master key.

As a result, attackers can compromise the confidentiality and integrity of your data, potentially accessing sensitive information and modifying or deleting data without authorization.

The vulnerability has a critical CVSS v4 base score of 9.9, indicating a high risk with no privileges or user interaction required for exploitation.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

[{'type': 'paragraph', 'content': 'This vulnerability affects the AI Agent API endpoint (POST /apps/:appId/agent) in Parse Dashboard versions 7.3.0-alpha.42 through 9.0.0-alpha.7 when the agent feature is enabled.'}, {'type': 'paragraph', 'content': 'To detect if your system is vulnerable, you can check if your Parse Dashboard configuration includes an agent configuration block, as dashboards without this block are not affected.'}, {'type': 'paragraph', 'content': 'Additionally, you can monitor network traffic for unauthenticated POST requests to the /apps/:appId/agent endpoint, which should normally require authentication in fixed versions.'}, {'type': 'paragraph', 'content': 'Example commands to detect potential exploitation attempts or presence of the vulnerable endpoint might include:'}, {'type': 'list_item', 'content': "Using curl to test the endpoint without authentication: curl -X POST http://your-dashboard-domain/apps/yourAppId/agent -d '{}'"}, {'type': 'list_item', 'content': 'Using network monitoring tools (e.g., tcpdump or Wireshark) to filter POST requests to the /apps/:appId/agent path.'}, {'type': 'list_item', 'content': 'Checking your Parse Dashboard configuration file for the presence of the agent configuration block.'}] [2]

Useful 0 Not Useful 0

Mitigation Strategies

The immediate mitigation step is to remove or comment out the agent configuration block from your Parse Dashboard configuration. This disables the vulnerable AI Agent API endpoint.

Upgrading Parse Dashboard to version 9.0.0-alpha.8 or later is recommended, as this version includes a fix that adds authentication, CSRF validation, and per-app authorization middleware to the agent endpoint.

Ensure that read-only users are restricted to the readOnlyMasterKey with write permissions stripped server-side, as implemented in the fixed version.

Useful 0 Not Useful 0