Which versions of Odysseus are affected by CVE-2026-70619?

Odysseus embedding management API lacks authorization controls, allowing any authenticated user to redirect all embedding operations-including chat messages, RAG queries, and vault text-to…. A patch is available.

Is there a public PoC exploit available for CVE-2026-70619?

Yes, a public proof-of-concept exploit is available for CVE-2026-70619. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate CVE-2026-70619?

Within 24 hours: inventory all Odysseus deployments and identify instances running versions prior to commit bf325f6; document what sensitive data flows through their embedding pipeline (chat history, RAG vectors, vault text). Within 7 days: apply vendor-released patch to all affected instances and verify embedding configuration integrity. Within 30 days: audit embedding configuration change logs for unauthorized modifications, review network traffic for suspicious exfiltration to unknown endpoints, and refresh any credentials or API keys that may have been exposed.

Odysseus CVE-2026-70619

Q: What is the CVSS score of CVE-2026-70619?

CVE-2026-70619 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

EUVD-2026-52932 HIGH

Missing Authorization (CWE-862)

2026-08-04 VulnCheck

GHSA-7jfx-c8jj-p569

Authentication Bypass Hashicorp Odysseus

8.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.9 CRITICAL

Low-privilege authenticated access via network; scope changed because the config overwrite affects all users' data, not just the attacker's own session.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Aug 05, 2026 - 00:07 vuln.today

Analysis Generated

Aug 05, 2026 - 00:07 vuln.today

CVE Published

Aug 04, 2026 - 21:21 cve.org

HIGH 8.7

DescriptionCVE.org

Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authentication but omit the admin authorization guard. Attackers can supply an attacker-controlled URL to overwrite the embedding backend persisted in the endpoint configuration file and process environment, causing all subsequent embedding operations including chat messages, RAG queries, memory entries, and vault text to be transmitted in plaintext to the attacker-controlled destination, or delete the endpoint configuration to deny embedding service to all users.

AnalysisAI

Missing admin authorization on the embedding management API in Odysseus allows any authenticated non-admin user to overwrite or delete the server-wide embedding backend configuration, redirecting all subsequent embedding operations - including chat messages, RAG queries, memory entries, and vault text - in plaintext to an attacker-controlled URL. All deployments running any version prior to commit bf325f6 are affected. A public exploit and detailed write-up are available, and the CVSS 4.0 score of 8.7 (PR:L) reflects the low barrier to exploitation for any account holder.

Technical ContextAI

Odysseus (CPE: cpe:2.3:a:odysseus-dev:odysseus:*:*:*:*:*:*:*:*) is a FastAPI-based AI assistant application supporting RAG, memory, and vault operations via pluggable embedding backends, including integration with HashiCorp Vault for secret text (explaining the 'Hashicorp' tag). The vulnerability is CWE-862 (Missing Authorization): the FastAPI APIRouter for /api/embeddings enforced session authentication via middleware but did not apply the require_admin dependency guard to endpoint management routes. The source code diff for fix commit bf325f6 confirms this precisely - the patch adds dependencies=[Depends(require_admin)] to the APIRouter constructor in routes/embedding_routes.py, meaning every endpoint registered under that router previously inherited only session checks, not admin checks. Because the embedding backend URL and configuration are persisted to a file and loaded into the process environment, a single successful exploitation rewrites the runtime configuration for all subsequent users and operations.

RemediationAI

Update Odysseus to or beyond commit bf325f6b2185cb42bc5d8f5713a64aecffb766d4, available at https://github.com/odysseus-dev/odysseus/commit/bf325f6b2185cb42bc5d8f5713a64aecffb766d4. This patch applies the require_admin dependency to the /api/embeddings APIRouter, enforcing admin authorization on all embedding management routes. No discrete tagged release version is independently confirmed in the available data, so operators should verify their deployed commit hash directly against bf325f6. If immediate patching is not feasible, restrict access to /api/embeddings management routes (specifically endpoint creation, update, and deletion operations) via a reverse proxy ACL or network policy that permits only admin-originating sessions - note this requires distinguishing management sub-routes from read paths to avoid breaking embedding functionality for regular users, which may be operationally complex. A second compensating control is to audit and lock the embedding backend configuration file's filesystem permissions so that the application process cannot overwrite it at runtime, though this may break legitimate admin reconfiguration flows.