CVE-2026-126767: OpsTree REMS through 1.0.0 Prompt Injection via RCA Chat Assistant
OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated users to disclose the hidden system prompt by submitting crafted chat input to POST /api/v1/rca/chat. Attackers can instruct the assistant to ignore its rules and reveal internal orchestration instructions, aiding the crafting of further prompt injection attacks.
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated user can exploit it by submitting crafted input to the RCA Chat Assistant endpoint at POST /api/v1/rca/chat. No user interaction beyond the attacker’s own authenticated access is required.
What information can be exposed?
The issue allows disclosure of the assistant’s hidden system prompt, including internal orchestration instructions. Those instructions may help an attacker craft additional prompt-injection attempts.
How can I determine whether my deployment is affected?
Deployments of OpsTree REMS through version 1.0.0 are affected if authenticated users can access the RCA Chat Assistant endpoint. Testing should verify whether crafted chat input can cause the assistant to reveal its hidden system prompt.