CVE-2026-82280 - Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier. Attackers with read-only access to shared brains can read exposed prompt identifiers and overwrite system prompts affecting all brain users. - 漏洞详情

漏洞编号：CVE-2026-82280

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-82280

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-639

发布/更新时间：2026-08-28 / 2026-08-28

漏洞描述

Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier. Attackers with read-only access to shared brains can read exposed prompt identifiers and overwrite system prompts affecting all brain users.

漏洞描述

相关链接

相关漏洞