CVE-2026-31368
Deferred Deferred - Pending Action
Privilege Bypass in AiAssistant Causes Potential Service Disruption

Publication date: 2026-04-21

Last updated on: 2026-05-10

Assigner: Honor Device Co., Ltd.

Description
AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-21
Last Modified
2026-05-10
Generated
2026-06-16
AI Q&A
2026-04-21
EPSS Evaluated
2026-06-14
NVD
CVE-2026-31368
EUVD
EUVD-2026-24063
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
honor aiassistant 90.0.12.010
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-31368 is a privilege bypass vulnerability in the AiAssistant software. This means an attacker can circumvent the normal privilege restrictions that are supposed to protect certain functions or data within the system.

Successful exploitation of this vulnerability may affect the availability of the AiAssistant service, potentially disrupting its normal operation.

Impact Analysis

This vulnerability can impact you by allowing an attacker to bypass privilege restrictions, which may lead to disruption or unavailability of the AiAssistant service.

If the service becomes unavailable, it could affect any dependent processes or users relying on AiAssistant, potentially causing operational issues.

Mitigation Strategies

To mitigate the privilege bypass vulnerability in AiAssistant (CVE-2026-31368), you should update the affected product to the fixed version.

  • Install the software update released for AiAssistant version 90.0.12.010 or later.
  • Enable automatic updates on your devices to receive the system update prompt and apply the fix promptly.
Compliance Impact

The provided information does not specify how the privilege bypass vulnerability in AiAssistant (CVE-2026-31368) affects compliance with common standards and regulations such as GDPR or HIPAA.

Detection Guidance

The vulnerability affects AiAssistant version 90.0.12.010 and involves privilege bypass that may impact service availability.

Detection can primarily be done by verifying the installed version of AiAssistant on your system or network devices.

  • Check the AiAssistant version installed to see if it matches 90.0.12.010, which is vulnerable.
  • If the system supports automatic updates, verify whether the security update addressing CVE-2026-31368 has been applied.

Specific commands to detect this vulnerability are not provided in the available resources.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-31368. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart