CVE-2026-82816: dibo-software diboot AI Session Endpoint ai-session authorization
A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is an unknown functionality of the file /api/ai-session/ of the component AI Session Endpoint. Such manipulation leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker with low-level privileges can exploit the authorization bypass. No user interaction is required.
What deployments are affected?
The affected product and version identified are dibo-software diboot 3.8.0. The issue is associated with the AI Session Endpoint at /api/ai-session/.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used.
Is a vendor fix or mitigation available?
The provided information does not identify a fix or workaround. It states that the vendor was contacted but did not respond.