CVE-2026-108853: UnicomAI Wanwu before 0.6.3 IDOR via DELETE /v1/appspace/app
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants' agent or RAG applications by supplying their appId. Attackers can send requests to DELETE /v1/appspace/app with guessed sequential assistant IDs to permanently delete victims' applications, workflows, conversations, and associated data.
Affected Software
Event History
Frequently Asked Questions
Which installations should be treated as affected?
UnicomAI Wanwu versions earlier than 0.6.3 are affected. Upgrade to version 0.6.3 or later.
Does an attacker need administrative access or user interaction?
No administrative access or user interaction is required. An authenticated low-privileged user can exploit the issue remotely.
What data can be lost if this is exploited?
An attacker can permanently delete another tenant's agent or RAG applications, including associated workflows, conversations, and data. The attacker supplies a victim appId to the DELETE /v1/appspace/app endpoint.
Are object identifiers likely to be easy to target?
The affected application IDs are described as sequential, allowing an attacker to guess victim assistant IDs for deletion requests.