EUVD-2026-42974
GHSA-fphv-wg9q-66c2
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible unauthenticated API discloses configuration only; no scope change, integrity, or availability impact warranting C:L/I:N/A:N/S:U.
Primary rating from Vendor (cisa-cg).
CVSS VectorVendor: cisa-cg
Lifecycle Timeline
3DescriptionCVE.org
Deloitte AI Assist for Customer disclosed some configuration information through public-facing API endpoints that accepted unauthenticated requests. This information could reduce an attacker’s reconnaissance effort. On 2026-03-25, AI Assist for Customer restricted network access and enforced authentication for the previously exposed endpoints.
AnalysisAI
Configuration information disclosure in Deloitte AI Assist for Customer exposed internal system details through unauthenticated, publicly accessible API endpoints, reducing attacker reconnaissance effort. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:L) confirms remote, low-complexity, unauthenticated access, though impact is bounded to low confidentiality exposure with no integrity or availability consequence. Deloitte confirmed the fix on 2026-03-25 by restricting network access and enforcing authentication on the affected endpoints; no public exploit or CISA KEV listing has been identified at time of analysis.
Technical ContextAI
The root cause is CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), a class of flaw in which an application surfaces data through interfaces that lack proper access controls. Deloitte AI Assist for Customer is an enterprise AI-powered customer engagement platform; its public-facing REST API endpoints failed to enforce authentication, allowing any network client to retrieve configuration metadata. The CPE string cpe:2.3:a:deloitte:ai_assist_for_customer:*:*:*:*:*:*:*:* covers all versions without a bounded range, indicating the exposure was present across the product's deployment history until the server-side remediation on 2026-03-25. Disclosed configuration data typically includes service URLs, internal identifiers, or system architecture hints - information that materially assists subsequent targeted attacks even without direct system access.
RemediationAI
Deloitte resolved the vulnerability on 2026-03-25 through two server-side controls: restricting network access to the previously public API endpoints and enforcing authentication on those endpoints. No versioned software release or patch number is referenced in the available data - the fix is a configuration and infrastructure change applied by the vendor to the hosted service. Organizations using Deloitte AI Assist for Customer should confirm with Deloitte that their tenant or deployment now requires authentication for all API endpoints and that unauthenticated access paths have been blocked at the network layer. If verification is not possible, temporarily blocking outbound or inbound access to the affected API paths at the perimeter is a viable compensating control, though this may disrupt legitimate API consumers. Refer to the advisory at https://zerotolerance.me/advisories/deloitte-aiassist-ascend-2026-vu487875/ and the CISA CSAF file for additional guidance.
More in Ai Assist For Customer
View allDeloitte AI Assist for Customer exposed public-facing REST API endpoints that accepted unauthenticated POST requests, en
Unauthenticated API endpoints in Deloitte AI Assist for Customer exposed the platform's retrieval-augmented generation c
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today