Intelligent Audit System
Monthly
AuditPilot's knowledge-retrieval endpoints let an authenticated user who holds read:knowledge on a single project read knowledge chunks belonging to other projects in the same tenant by supplying a foreign context.project_id to GET /api/knowledge/query or POST /api/research/answer. Builds of the intelligent-audit-system repository prior to commit 4669c93f3a7403a0e242bef14d771beef0b4356b are affected; the exposure is confidentiality-only and stays inside one tenant, and the attacker must know or guess a valid in-tenant project identifier before the bypass returns anything. No public exploit code and no CISA KEV entry were identified at time of analysis, and the low severity score is consistent with the monitor priority label assigned to this CVE.
AuditPilot's knowledge-retrieval endpoints let an authenticated user who holds read:knowledge on a single project read knowledge chunks belonging to other projects in the same tenant by supplying a foreign context.project_id to GET /api/knowledge/query or POST /api/research/answer. Builds of the intelligent-audit-system repository prior to commit 4669c93f3a7403a0e242bef14d771beef0b4356b are affected; the exposure is confidentiality-only and stays inside one tenant, and the attacker must know or guess a valid in-tenant project identifier before the bypass returns anything. No public exploit code and no CISA KEV entry were identified at time of analysis, and the low severity score is consistent with the monitor priority label assigned to this CVE.