CVE-2026-125386: langchain4j-aideepin through 3.32.0 IDOR via /character/message reference endpoints
langchain4j-aideepin through 3.32.0 contains an insecure direct object reference vulnerability in CharacterMessageController that allows authenticated users to access other users' message references due to missing owner checks. Attackers can supply another user's message uuid to the knowledge-embedding-ref, memory-embedding-ref, or graph-ref endpoints to retrieve knowledge-base chunks, long-term memory text, and knowledge-graph data.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated user with access to the affected application can exploit it. The attacker needs to know or obtain another user's message UUID.
What information could be exposed?
The affected reference endpoints can disclose knowledge-base chunks, long-term memory text, and knowledge-graph data associated with another user's message.
Which endpoints are affected?
The knowledge-embedding-ref, memory-embedding-ref, and graph-ref endpoints are affected when they accept a message UUID without enforcing ownership checks.
How can I determine whether my deployment is affected?
Deployments using langchain4j-aideepin through version 3.32.0 are affected. Testing with an authenticated account and a message UUID belonging to a different user can confirm whether the reference endpoints return that user's data.