Odysseus
Monthly
Missing admin authorization on the embedding management API in Odysseus allows any authenticated non-admin user to overwrite or delete the server-wide embedding backend configuration, redirecting all subsequent embedding operations - including chat messages, RAG queries, memory entries, and vault text - in plaintext to an attacker-controlled URL. All deployments running any version prior to commit bf325f6 are affected. A public exploit and detailed write-up are available, and the CVSS 4.0 score of 8.7 (PR:L) reflects the low barrier to exploitation for any account holder.
Server-side request forgery in Odysseus before commit 87babb5 allows admin-authenticated attackers to weaponize the embedding endpoint configuration API to probe internal network resources, including cloud instance metadata services at 169.254.169.254, RFC 1918 hosts, and other server-reachable targets. The vulnerability arises because the embedding endpoint accepted arbitrary URLs without validating scheme, host, IP range, or DNS rebinding protections, enabling partial response exfiltration from cloud credential endpoints and internal APIs. A publicly available exploit and blog post exist; the vulnerability is not currently listed in CISA KEV, but the high subsequent-system confidentiality impact (SC:H in the provided CVSS 4.0 vector) reflects real risk of cloud credential theft from metadata services.
Missing admin authorization on the embedding management API in Odysseus allows any authenticated non-admin user to overwrite or delete the server-wide embedding backend configuration, redirecting all subsequent embedding operations - including chat messages, RAG queries, memory entries, and vault text - in plaintext to an attacker-controlled URL. All deployments running any version prior to commit bf325f6 are affected. A public exploit and detailed write-up are available, and the CVSS 4.0 score of 8.7 (PR:L) reflects the low barrier to exploitation for any account holder.
Server-side request forgery in Odysseus before commit 87babb5 allows admin-authenticated attackers to weaponize the embedding endpoint configuration API to probe internal network resources, including cloud instance metadata services at 169.254.169.254, RFC 1918 hosts, and other server-reachable targets. The vulnerability arises because the embedding endpoint accepted arbitrary URLs without validating scheme, host, IP range, or DNS rebinding protections, enabling partial response exfiltration from cloud credential endpoints and internal APIs. A publicly available exploit and blog post exist; the vulnerability is not currently listed in CISA KEV, but the high subsequent-system confidentiality impact (SC:H in the provided CVSS 4.0 vector) reflects real risk of cloud credential theft from metadata services.