Insecure Direct Object Reference in UnicomAI Wanwu

Executive Summary

UnicomAI Wanwu before version 0.6.3 has an insecure direct object reference vulnerability. Authenticated low-privileged users can delete other tenants' agent or RAG applications by providing their appId. Attackers exploit this by sending DELETE requests to /v1/appspace/app with guessed sequential assistant IDs, leading to permanent deletion of victims' applications, workflows, conversations, and associated data.

Useful 0 Not Useful 0

Detection Guidance

Check UnicomAI Wanwu logs for DELETE requests to /v1/appspace/app with sequential assistant IDs. Monitor for unauthorized deletions of agent or RAG applications by low-privileged users.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers with low privileges to delete critical applications and data belonging to other users. If exploited, it can disrupt workflows, cause data loss, and potentially lead to unauthorized access to sensitive information through deleted resources.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA by enabling unauthorized data deletion and potential exposure of sensitive information. GDPR requires data integrity and availability, while HIPAA mandates protection of health data. Exploitation may result in violations and associated penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade UnicomAI Wanwu to version 0.6.3 or later. Implement strict access controls to prevent low-privileged users from deleting applications. Review and restrict permissions for DELETE operations on /v1/appspace/app endpoints.

Useful 0 Not Useful 0