Honcho
Monthly
Workspace metadata and custom_instructions disclosure in Plastic Labs Honcho through 3.3.0 allows a holder of a peer- or session-scoped API key to read workspace-level configuration they should not be able to access. The flaw (CWE-863, incorrect authorization) is that get_or_create_workspace inspects only the workspace claim on the supplied token and never verifies the key's scope, so an attacker who knows the parent workspace name can submit it to POST /v3/workspaces and retrieve fields such as custom_instructions that are reserved for workspace or admin keys. Exploitation requires an already-valid low-privilege scoped credential and knowledge of the workspace name (CVSS 4.0 base 5.3, PR:L, read-only confidentiality impact); no public exploit code or confirmed active exploitation was identified at time of analysis, and no vendor-released patch is present in the available intelligence.
Workspace metadata and custom_instructions disclosure in Plastic Labs Honcho through 3.3.0 allows a holder of a peer- or session-scoped API key to read workspace-level configuration they should not be able to access. The flaw (CWE-863, incorrect authorization) is that get_or_create_workspace inspects only the workspace claim on the supplied token and never verifies the key's scope, so an attacker who knows the parent workspace name can submit it to POST /v3/workspaces and retrieve fields such as custom_instructions that are reserved for workspace or admin keys. Exploitation requires an already-valid low-privilege scoped credential and knowledge of the workspace name (CVSS 4.0 base 5.3, PR:L, read-only confidentiality impact); no public exploit code or confirmed active exploitation was identified at time of analysis, and no vendor-released patch is present in the available intelligence.