CVE-2026-82271 - R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users' conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users' conversation histories, corrupting state and injecting malicious content. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-82290 [中危] CVE-2026-82290 - Chainlit through 2.12.0 fails to validate ownership o…
• CVE-2026-82284 [高危] CVE-2026-82284 - Quivr versions through 0.0.322 fail to validate chat …
• CVE-2026-82283 [高危] CVE-2026-82283 - VoltAgent through 2.1.20 fails to validate conversati…
• CVE-2026-82281 [高危] CVE-2026-82281 - Kotaemon through 0.12.0 fails to properly validate co…
• CVE-2026-82280 [高危] CVE-2026-82280 - Quivr through 0.0.322 fails to validate ownership in …
• CVE-2026-82271 [中危] CVE-2026-82271 - R2R through 3.6.5 fails to properly validate user own…
• CVE-2026-55067 [中危] CVE-2026-55067 - Vikunja is an open-source self-hosted task management…
• CVE-2026-55066 [高危] CVE-2026-55066 - Vikunja is an open-source self-hosted task management…