EUVD-2026-67815
GHSA-3j2c-qqcf-39m8
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible IDOR requiring only an authenticated low-privilege account; high C and I for cross-user read and write; no availability impact from the described operations.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
Quivr versions through 0.0.322 fail to validate chat ownership in the GET /chat/{chat_id}/history, DELETE /chat/{chat_id}, and POST /chat/{chat_id}/question/answer endpoints. Authenticated attackers can read other users' conversation histories including private knowledge base content, delete arbitrary chats, and inject fabricated messages into other users' conversations.
AnalysisAI
Missing ownership validation across three Quivr chat API endpoints through version 0.0.322 enables any authenticated user to read, delete, or inject fabricated messages into other users' private conversations and associated knowledge base content. The vulnerable endpoints (GET /chat/{chat_id}/history, DELETE /chat/{chat_id}, POST /chat/{chat_id}/question/answer) accept user-supplied chat IDs without server-side authorization checks, a classic IDOR (CWE-639) pattern. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid, authenticated Quivr user account (confirmed by PR:L in the provided CVSS 4.0 vector) - no administrative privileges, elevated roles, or non-default configuration are needed. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 8.6 accurately reflects the combination of network accessibility, low attack complexity, no attack requirements, low privilege threshold, and high confidentiality and integrity impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patched version has been confirmed at time of analysis; operators should monitor the GitHub repository (https://github.com/QuivrHQ/quivr) and VulnCheck advisory (https://www.vulncheck.com/advisories/quivr-chat-endpoints-missing-ownership-validation) for a fix release and upgrade as soon as one is available. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all Quivr deployments and confirm running versions against 0.0.322 baseline; assess user account permissions and disable unnecessary accounts in shared instances. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. Rated high severity (CVSS
A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which al
A stored cross-site scripting (XSS) vulnerability exists in the 'Upload Knowledge' feature of stangirard/quivr, affectin
A path traversal vulnerability exists in the latest version of stangirard/quivr. Rated medium severity (CVSS 4.3), this
Prompt endpoint ownership validation failure in Quivr through 0.0.322 enables authenticated users with only read-only br
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today