CVE-2026-108110: MOVO through 0.2.3 Authorization Bypass via Document Endpoints
MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths. Attackers who know a target's object path can send it to /api/documents/fetch or /api/documents/save-blueprint to read private documents and overwrite presentation blueprints.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated MOVO user can exploit it. The attacker must know the target object's path and can then submit that path to the affected document endpoints.
What access can an attacker obtain or change?
An attacker can read another user's private stored documents through /api/documents/fetch. They can also overwrite presentation blueprints through /api/documents/save-blueprint.
Are deployments beyond version 0.2.3 affected?
The provided information identifies MOVO through 0.2.3 as affected. It does not state whether later versions are affected or contain a fix.