Quivr Chat Ownership Validation Flaw Exposes Conversations

Executive Summary

CVE-2026-82284 is an authorization bypass vulnerability in Quivr versions up to 0.0.322. It allows authenticated attackers to exploit missing ownership validation in three chat endpoints: GET /chat/{chat_id}/history, DELETE /chat/{chat_id}, and POST /chat/{chat_id}/question/answer. Attackers can read other users' private conversation histories, delete arbitrary chats, and inject fabricated messages into conversations without proper authorization checks.

The root cause is that these endpoints accept a user-supplied chat_id without verifying if the chat belongs to the requesting user, enabling cross-user access and violating both confidentiality and integrity of user data.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor API logs for unauthorized access attempts to GET /chat/{chat_id}/history, DELETE /chat/{chat_id}, or POST /chat/{chat_id}/question/answer endpoints. Check for requests where the chat_id does not match the authenticated user's ID. Use tools like curl to test endpoints with mismatched chat IDs and verify if responses include unauthorized data.

Useful 0 Not Useful 0

Impact Analysis

If you use Quivr versions up to 0.0.322, an attacker with access to your account or a valid chat_id could read your private conversations, including sensitive knowledge base content. They could also delete your chats permanently or inject fake messages into your conversations, compromising the integrity of your data and interactions.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates GDPR and HIPAA requirements for data confidentiality and integrity. It exposes private user data to unauthorized access, which could lead to breaches of protected health information or personal data. Organizations using affected Quivr versions may face compliance violations, legal liabilities, and reputational damage due to unauthorized data exposure and manipulation.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update Quivr to a version that includes ownership validation for the affected endpoints. If an update is unavailable, implement server-side checks to verify that the chat_id belongs to the authenticated user before processing requests. Temporarily restrict access to the vulnerable endpoints or disable them until patched.

Useful 0 Not Useful 0