DeepTutor CVE-2026-51878

Exploitation requires an authenticated low-privileged caller (PR:L) who can reach the deeptutor API over the network, plus the ability to enumerate or otherwise obtain a valid session_id belonging to a victim, which is then passed to TurnRuntimeManager.regenerate_last_turn. Limiting factors: the attacker must already possess a valid account on the instance, must know or guess another user's session_id (enumeration feasibility depends on how predictable those identifiers are), and the impact is confined to triggering regeneration of another user's session turn (integrity) with no confidentiality or availability loss per the CVSS vector. Affects deeptutor 1.4.0.

Signals converge on a LOW-to-MODERATE real-world priority rather than a high-urgency issue. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N, base 4.3 Medium) describes a network-reachable but authenticated (PR:L) flaw with only a low integrity impact and no confidentiality or availability loss - consistent with an IDOR-style authorization bypass that lets one tenant act on another tenant's session. EPSS is 0.15% (4th percentile), indicating very low predicted exploitation, and the CVE is NOT on the CISA KEV list, so there is no evidence of active exploitation. No SSVC decision data was provided in the input. The signals do not conflict: a modest CVSS, very low EPSS, no KEV, and a niche open-source target all point the same direction. One caveat: one of the references is a GitHub gist (Ro1ME) that may contain proof-of-concept detail, but the input contains no explicit POC flag, so exploit-code availability cannot be confirmed from the data provided - verify by opening the gist. Net: a legitimate access-control bug worth patching, but not a widespread emergency.

An attacker creates or already holds an ordinary low-privileged account on a deeptutor deployment, then enumerates or otherwise obtains a session_id belonging to a different user. The attacker invokes TurnRuntimeManager.regenerate_last_turn against that foreign session_id, forcing an unauthorized regeneration of another user's conversation turn. No public exploit identified at time of analysis, though a referenced gist may contain proof-of-concept material.