Chatbot Ui
Monthly
Cross-user private file content disclosure in mckaywrigley's Chatbot UI allows any authenticated user to read indexed file chunks belonging to other users by supplying arbitrary file UUIDs to the retrieval endpoint. The root cause is that the `/api/retrieval/retrieve` route uses a Supabase service-role client - which carries elevated privileges that bypass Supabase row-level security (RLS) - while performing no file ownership check against the requesting user's identity. No public exploit or KEV listing is identified at time of analysis, but the vulnerability is straightforward to exploit given valid credentials and knowledge of a target file UUID.
Cross-user private file content disclosure in mckaywrigley's Chatbot UI allows any authenticated user to read indexed file chunks belonging to other users by supplying arbitrary file UUIDs to the retrieval endpoint. The root cause is that the `/api/retrieval/retrieve` route uses a Supabase service-role client - which carries elevated privileges that bypass Supabase row-level security (RLS) - while performing no file ownership check against the requesting user's identity. No public exploit or KEV listing is identified at time of analysis, but the vulnerability is straightforward to exploit given valid credentials and knowledge of a target file UUID.