EUVD-2026-42975
GHSA-23xg-h5j2-8fcf
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible with no auth required per description and PR:N in source vector; scope unchanged, no confidentiality or availability impact; low integrity write only.
Primary rating from Vendor (cisa-cg).
CVSS VectorVendor: cisa-cg
Lifecycle Timeline
3DescriptionCVE.org
Deloitte AI Assist for Customer accepted unauthenticated POST requests through public-facing API endpoints that allowed a remote attacker to make limited additions to the configuration. These additions were not used by the system. On 2026-03-25, AI Assist for Customer restricted network access and enforced authentication for the previously exposed endpoints.
AnalysisAI
Deloitte AI Assist for Customer exposed public-facing REST API endpoints that accepted unauthenticated POST requests, enabling remote attackers to inject limited additions into the application's configuration store without credentials. The root cause is CWE-306 (Missing Authentication for Critical Function), and the CVSS 4.0 vector (PR:N/AV:N/AC:L) confirms zero-friction remote exploitation against default deployments. Critically, the vendor states that the injected configuration additions were not consumed or acted upon by the system, substantially constraining real-world operational impact. The vendor remediated the issue on 2026-03-25 by restricting network access and enforcing authentication; no public exploit has been identified at time of analysis.
Technical ContextAI
Deloitte AI Assist for Customer (CPE: cpe:2.3:a:deloitte:ai_assist_for_customer:*:*:*:*:*:*:*:*) is a proprietary enterprise AI solution within the Deloitte Ascend product family. The root cause is CWE-306 (Missing Authentication for Critical Function): one or more public-facing API endpoints accepted HTTP POST requests without verifying caller identity, exposing configuration write operations to any network-reachable client. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms that exploitation requires no privilege escalation, no user interaction, and no special attack configuration - only network reachability. The scope of the write primitive is described as 'limited additions' to configuration, and the vendor asserts those additions are not processed by application logic, suggesting the vulnerable pathway leads to an isolated or inert configuration store. A related CVE-2026-57474 is cross-referenced in the same advisory set and likely shares the same attack surface or product context.
RemediationAI
On 2026-03-25, Deloitte remediated this vulnerability by restricting network access to the previously exposed endpoints and enforcing authentication for all affected API paths. Organizations running AI Assist for Customer should confirm with Deloitte that their deployment reflects the post-2026-03-25 remediated state. No specific patched version number is identifiable from available intelligence - the CPE uses a wildcard and no fixed release tag is cited in references. Consult the CISA CSAF advisory at https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-191-01.json and the third-party advisory PDF at https://zerotolerance.me/advisories/assets/VU487875-deloitte-ascend-advisory.pdf for confirmed remediation scope. As an interim compensating control for any deployment where the vendor fix cannot be immediately confirmed, blocking inbound unauthenticated POST requests to the affected API base paths at the perimeter WAF or firewall ACL is viable; given the vendor's assertion that the additions were unused, this control carries no functional trade-off.
More in Ai Assist For Customer
View allConfiguration information disclosure in Deloitte AI Assist for Customer exposed internal system details through unauthen
Unauthenticated API endpoints in Deloitte AI Assist for Customer exposed the platform's retrieval-augmented generation c
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today