CVE-2026-110611: REBUILD through 4.5.0 Authorization Bypass via aibot2 Chat Endpoints chatid
REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifying ownership. Authenticated low-privilege users can supply another user's chatid to chat-init, chat-delete, chat-feedback, or chat-stream-stop to read, delete, exfiltrate, or interrupt AI assistant conversations.
Affected Software
Event History
Frequently Asked Questions
Does an attacker need an account to exploit this issue?
Yes. Exploitation requires authentication as a low-privilege user; no user interaction is required.
What information must an attacker provide?
The attacker must supply another user's chatid to the affected AiBot2Controller endpoints. The endpoints do not verify that the caller owns the referenced chat.
What can an attacker do with another user's chatid?
Depending on the endpoint used, an attacker can read or exfiltrate conversations, delete chats, submit feedback, or interrupt an AI assistant conversation stream.