CVE-2026-115718: Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt

Published Oct 26, 2026

Updated

Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improveprompt endpoint that allows any authenticated non-Guest session to invoke LLM completions without proper permission checks. Attackers can call the improveprompt API to leverage the site owner's stored OpenRouter API key via resolveapikey, consuming paid LLM credits and effectively turning the site into a free LLM proxy.

Affected Software

0 affected components

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Frappe Builder to a version that resolves this vulnerability.
Fixed in 1.36.0

Event History

Oct 26, 2026

CVE Published

via MITRE·11:40 AM

Data Sourced

via MITRE·11:40 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

Any authenticated user with a non-Guest session can invoke the affected improve_prompt endpoint. No additional permissions are required according to the advisory data.

What is required for the vulnerability to have an impact?

The site must have an OpenRouter API key stored for use by the application. An attacker can cause LLM completions to be made using that site owner's key, consuming its paid credits.

Are unauthenticated users affected?

The issue requires an authenticated non-Guest session. The provided information does not indicate that Guest or unauthenticated sessions can exploit it.

Which versions should be remediated?

Frappe Builder versions from 1.33.0 up to, but not including, 1.36.0 are affected. Upgrade to version 1.36.0 or later.