Quivr
Monthly
Missing ownership validation across three Quivr chat API endpoints through version 0.0.322 enables any authenticated user to read, delete, or inject fabricated messages into other users' private conversations and associated knowledge base content. The vulnerable endpoints (GET /chat/{chat_id}/history, DELETE /chat/{chat_id}, POST /chat/{chat_id}/question/answer) accept user-supplied chat IDs without server-side authorization checks, a classic IDOR (CWE-639) pattern. No public exploit code has been identified and this CVE is not listed in the CISA KEV catalog at time of analysis, but the low-complexity, authenticated-only prerequisite makes exploitation trivially accessible to any malicious account holder in a multi-user deployment.
Prompt endpoint ownership validation failure in Quivr through 0.0.322 enables authenticated users with only read-only brain access to overwrite any system prompt by supplying a harvested prompt identifier to an unprotected write endpoint. The IDOR flaw (CWE-639) means that low-privileged authenticated accounts can silently corrupt AI brain behavior for all users of a shared brain, with no elevated privileges required beyond a valid session. No public exploit code or CISA KEV listing is confirmed at time of analysis, but the low attack complexity and broad scope of impact across all brain users make this a practical integrity threat in multi-tenant Quivr deployments.
A path traversal vulnerability exists in the latest version of stangirard/quivr. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A stored cross-site scripting (XSS) vulnerability exists in the 'Upload Knowledge' feature of stangirard/quivr, affecting the latest version. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Missing ownership validation across three Quivr chat API endpoints through version 0.0.322 enables any authenticated user to read, delete, or inject fabricated messages into other users' private conversations and associated knowledge base content. The vulnerable endpoints (GET /chat/{chat_id}/history, DELETE /chat/{chat_id}, POST /chat/{chat_id}/question/answer) accept user-supplied chat IDs without server-side authorization checks, a classic IDOR (CWE-639) pattern. No public exploit code has been identified and this CVE is not listed in the CISA KEV catalog at time of analysis, but the low-complexity, authenticated-only prerequisite makes exploitation trivially accessible to any malicious account holder in a multi-user deployment.
Prompt endpoint ownership validation failure in Quivr through 0.0.322 enables authenticated users with only read-only brain access to overwrite any system prompt by supplying a harvested prompt identifier to an unprotected write endpoint. The IDOR flaw (CWE-639) means that low-privileged authenticated accounts can silently corrupt AI brain behavior for all users of a shared brain, with no elevated privileges required beyond a valid session. No public exploit code or CISA KEV listing is confirmed at time of analysis, but the low attack complexity and broad scope of impact across all brain users make this a practical integrity threat in multi-tenant Quivr deployments.
A path traversal vulnerability exists in the latest version of stangirard/quivr. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A stored cross-site scripting (XSS) vulnerability exists in the 'Upload Knowledge' feature of stangirard/quivr, affecting the latest version. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.