CVE-2026-89141: AI Engine <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter

Published Sep 15, 2026
·
Updated

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.7 via the 'mediaId' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to access and retrieve the transcribed contents of private audio attachments belonging to other users, including Administrators, via a supplied attachment ID. This vulnerability requires the Public API module to be enabled in the plugin settings; when disabled, the REST route is absent and the endpoint returns HTTP 404.

Affected Software

1 affected component
AI Engine AI Engine – The Chatbot, AI Framework & MCP for WordPress<=3.7.7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade AI Engine – The Chatbot, AI Framework & MCP for WordPress to a version that resolves this vulnerability.

    Fixed in 3.7.7
  2. Configuration

    Disable the plugin’s Public API module in WordPress plugin settings to remove the affected REST route (endpoint returns HTTP 404 when disabled).

    AI Engine – The Chatbot, AI Framework & MCP for WordPress (Public API module) Public API module enabled = disabled

Event History

Sep 15, 2026
CVE Published
via MITRE·06:07 AM
Data Sourced
via MITRE·06:07 AM
DescriptionSeverityWeakness

Frequently Asked Questions

1

Which deployments are exposed?

Sites using AI Engine versions up to and including 3.7.7 are exposed when the plugin's Public API module is enabled. The issue affects access to transcribed content from private audio attachments.

2

What level of access does an attacker need?

An attacker must be authenticated to the WordPress site with at least Subscriber-level access. No user interaction is required.

3

What can be done if updating is not immediately possible?

Disable the AI Engine Public API module in the plugin settings. When this module is disabled, the affected REST route is absent and returns HTTP 404.

4

How can I assess whether this applies to my site?

Check whether AI Engine is version 3.7.7 or earlier and whether its Public API module is enabled. If both conditions apply, authenticated users with Subscriber-level access or higher may be able to retrieve other users' private audio transcriptions using attachment IDs.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203