CVE-2026-111363: BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/filebbox to retrieve extracted page text from other users' and tenants' knowledge bases.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any authenticated user with low privileges can exploit it. The attacker does not need elevated permissions or user interaction; they only need to send requests to the affected endpoint.
What information can an attacker obtain?
An attacker can retrieve extracted page text from parsed documents belonging to other users and other tenants' knowledge bases. They do this by supplying arbitrary, sequential file_id values to GET /api/v1/knowledge/file_bbox.
How can I determine whether an instance is affected?
Instances running BISHENG through 3.0.0-beta4 are in scope. A practical check is to use a low-privileged test account and verify whether GET /api/v1/knowledge/file_bbox returns document text when given a file_id owned by a different test user or tenant.
What can be done if patching is not immediately possible?
Restrict access to the affected endpoint to trusted users and limit low-privileged account creation or access where possible. Monitor requests to /api/v1/knowledge/file_bbox for repeated or sequential file_id values, which may indicate enumeration attempts.