CVE-2026-89141: AI Engine <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.7 via the 'mediaId' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to access and retrieve the transcribed contents of private audio attachments belonging to other users, including Administrators, via a supplied attachment ID. This vulnerability requires the Public API module to be enabled in the plugin settings; when disabled, the REST route is absent and the endpoint returns HTTP 404.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
AI Engine – The Chatbot, AI Framework & MCP for WordPressto a version that resolves this vulnerability.Fixed in 3.7.7 - Configuration
Disable the plugin’s Public API module in WordPress plugin settings to remove the affected REST route (endpoint returns HTTP 404 when disabled).
AI Engine – The Chatbot, AI Framework & MCP for WordPress (Public API module) Public API module enabled = disabled
Event History
Frequently Asked Questions
Which deployments are exposed?
Sites using AI Engine versions up to and including 3.7.7 are exposed when the plugin's Public API module is enabled. The issue affects access to transcribed content from private audio attachments.
What level of access does an attacker need?
An attacker must be authenticated to the WordPress site with at least Subscriber-level access. No user interaction is required.
What can be done if updating is not immediately possible?
Disable the AI Engine Public API module in the plugin settings. When this module is disabled, the affected REST route is absent and returns HTTP 404.
How can I assess whether this applies to my site?
Check whether AI Engine is version 3.7.7 or earlier and whether its Public API module is enabled. If both conditions apply, authenticated users with Subscriber-level access or higher may be able to retrieve other users' private audio transcriptions using attachment IDs.