CVE-2026-121558: AuditPilot before commit 4669c93 RAG Project-Scope Authorization Bypass via project_id
Published Nov 3, 2026
·Updated
AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in metadataallowed in rag/agenticrag.py that allows authenticated users to read other projects' knowledge by supplying projectid. Attackers with read:knowledge scoped to one project can set context.projectid via GET /api/knowledge/query or POST /api/research/answer to retrieve same-tenant project knowledge chunks.
Event History
Nov 3, 2026
CVE Published
via MITRE·03:17 PM
Data Sourced
via MITRE·03:17 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeakness
Event
via NVD·04:17 PM