Deloitte AI Assist for Customer API Information Exposure

Executive Summary

This vulnerability involves Deloitte AI Assist for Customer exposing some configuration information through public-facing API endpoints that did not require authentication. This exposure allowed attackers to gather information more easily during reconnaissance phases of an attack.

The issue was addressed on 2026-03-25 by restricting network access and enforcing authentication on these previously exposed endpoints.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability could reduce the effort required by an attacker to perform reconnaissance on the system by providing access to configuration information without authentication.

This could potentially facilitate further attacks by giving attackers insights into the system setup, increasing the risk of exploitation.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves unauthenticated access to public-facing API endpoints that disclose configuration information. Detection can be performed by scanning your network or system for these exposed endpoints and attempting unauthenticated HTTP requests to them.

You can use tools like curl or wget to test access to the suspected API endpoints. For example, a command like the following can be used to check if the endpoint is accessible without authentication:

• curl -v http://<target-host>/api/endpoint

Additionally, network scanning tools such as Nmap with HTTP scripts can help identify exposed API endpoints:

• nmap -p 80,443 --script http-enum <target-host>

Monitoring logs for unauthenticated requests to API endpoints and unusual access patterns can also help detect exploitation attempts.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include restricting network access to the affected API endpoints and enforcing authentication to prevent unauthenticated access.

According to the CVE description, Deloitte AI Assist for Customer has already implemented these measures as of 2026-03-25.

• Restrict access to the API endpoints by implementing network-level controls such as firewalls or access control lists.
• Enforce strong authentication mechanisms on all public-facing API endpoints.
• Review and update configurations to ensure no sensitive information is exposed through unauthenticated requests.
• Monitor logs for unauthorized access attempts and respond accordingly.

Useful 0 Not Useful 0