Vulnerability-Lookup

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Full-Text Search

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-71424 (GCVE-0-2026-71424)

Vulnerability from nvd – Published: 2026-08-17 21:28 – Updated: 2026-08-18 17:47

Title

Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers

Summary

Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another user's OAuth Authorization header because OnyxTokenStorage.set_tokens and OnyxTokenStorage.set_client_info in backend/onyx/server/features/mcp/api.py copy per-user tokens into a shared admin MCPConnectionConfig row and _db_mcp_server_to_api_mcp_server returns that row through auth_template.headers to any BASIC_ACCESS user. This issue is fixed in versions 3.1.10, 3.2.14, and 4.0.0.

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 17:28 UTC

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
CWE-863 - Incorrect Authorization

Assigner

GitHub_M mitre root

References

8 references

URL	Tags
https://github.com/onyx-dot-app/onyx/security/adv…	x_refsource_CONFIRM
https://github.com/onyx-dot-app/onyx/pull/11238	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/pull/11242	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/pull/11243	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/commit/3f3d7…	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/commit/4001c…	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/commit/b1039…	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
onyx-dot-app	onyx	Affected: < 3.1.10 Affected: >= 3.2.0, < 3.2.14 Affected: >= 3.3.0-beta.0, < 4.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-71424",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T17:28:35.060950Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T17:47:10.013Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "onyx",
          "vendor": "onyx-dot-app",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.1.10"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.2.0, \u003c 3.2.14"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.3.0-beta.0, \u003c 4.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx\u0027s GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another user\u0027s OAuth Authorization header because OnyxTokenStorage.set_tokens and OnyxTokenStorage.set_client_info in backend/onyx/server/features/mcp/api.py copy per-user tokens into a shared admin MCPConnectionConfig row and _db_mcp_server_to_api_mcp_server returns that row through auth_template.headers to any BASIC_ACCESS user. This issue is fixed in versions 3.1.10, 3.2.14, and 4.0.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T21:28:32.814Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-q62f-rv3h-f822",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-q62f-rv3h-f822"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/pull/11238",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/pull/11238"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/pull/11242",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/pull/11242"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/pull/11243",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/pull/11243"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/commit/3f3d79d1a7722fdc84a1c61c8aa830d890017e9e",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/commit/3f3d79d1a7722fdc84a1c61c8aa830d890017e9e"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/commit/4001cedd0a8968723bfe95dd188914ed56777910",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/commit/4001cedd0a8968723bfe95dd188914ed56777910"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/commit/b103937888fd5008067c2bb6eb6e5424576394f2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/commit/b103937888fd5008067c2bb6eb6e5424576394f2"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/releases/tag/v4.0.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/releases/tag/v4.0.0"
        }
      ],
      "source": {
        "advisory": "GHSA-q62f-rv3h-f822",
        "discovery": "UNKNOWN"
      },
      "title": "Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-71424",
    "datePublished": "2026-08-17T21:28:32.814Z",
    "dateReserved": "2026-08-06T16:28:51.182Z",
    "dateUpdated": "2026-08-18T17:47:10.013Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63178 (GCVE-0-2026-63178)

Vulnerability from nvd – Published: 2026-08-17 21:30 – Updated: 2026-08-18 15:43

Title

Onyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosure

Summary

Onyx is an open-source AI platform. Prior to 4.3.0, Onyx Enterprise Edition's PATCH /manage/admin/user-group/{user_group_id} and POST /manage/admin/user-group/{user_group_id}/add-users endpoints in ee/onyx/server/user_group/api.py call update_user_group and add_users_to_user_group in ee/onyx/db/user_group.py without enforcing _validate_curator_can_modify_group, allowing a curator to add accounts to arbitrary groups and obtain document access through get_acl_for_user and the OpenSearch access_control_list filter. This issue is fixed in version 4.3.0.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 15:42 UTC

CWE

CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

GitHub_M mitre root

References

6 references

URL	Tags
https://github.com/onyx-dot-app/onyx/security/adv…	x_refsource_CONFIRM
https://github.com/onyx-dot-app/onyx/pull/12525	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/pull/12549	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/commit/46e19…	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/commit/b9e1c…	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
onyx-dot-app	onyx	Affected: < 4.3.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63178",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T15:42:41.983120Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T15:43:08.077Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-7f48-vgpj-h95m"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "onyx",
          "vendor": "onyx-dot-app",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 4.3.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Onyx is an open-source AI platform. Prior to 4.3.0, Onyx Enterprise Edition\u0027s PATCH /manage/admin/user-group/{user_group_id} and POST /manage/admin/user-group/{user_group_id}/add-users endpoints in ee/onyx/server/user_group/api.py call update_user_group and add_users_to_user_group in ee/onyx/db/user_group.py without enforcing _validate_curator_can_modify_group, allowing a curator to add accounts to arbitrary groups and obtain document access through get_acl_for_user and the OpenSearch access_control_list filter. This issue is fixed in version 4.3.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "CWE-639: Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T21:30:40.463Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-7f48-vgpj-h95m",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-7f48-vgpj-h95m"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/pull/12525",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/pull/12525"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/pull/12549",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/pull/12549"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/commit/46e19cc2750fed659488cb12a1f171016ba5a099",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/commit/46e19cc2750fed659488cb12a1f171016ba5a099"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/commit/b9e1c6894be3c237283f4b5fd4eb0af935b40664",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/commit/b9e1c6894be3c237283f4b5fd4eb0af935b40664"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/releases/tag/v4.3.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/releases/tag/v4.3.0"
        }
      ],
      "source": {
        "advisory": "GHSA-7f48-vgpj-h95m",
        "discovery": "UNKNOWN"
      },
      "title": "Onyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosure"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-63178",
    "datePublished": "2026-08-17T21:30:40.463Z",
    "dateReserved": "2026-07-15T22:13:00.720Z",
    "dateUpdated": "2026-08-18T15:43:08.077Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42277 (GCVE-0-2026-42277)

Vulnerability from nvd – Published: 2026-05-08 03:51 – Updated: 2026-05-08 21:28

Title

Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files

Summary

Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows any authenticated user to download any other user's uploaded files by providing the file UUID. The endpoint verifies the caller is authenticated but never checks that the file belongs to them. An attacker who knows or obtains a file UUID can access confidential documents, chat attachments, and other files uploaded by any user in the system. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-08 14:29 UTC

CWE

CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

GitHub_M mitre root

References

1 reference

URL	Tags
https://github.com/onyx-dot-app/onyx/security/adv…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
onyx-dot-app	onyx	Affected: < 3.0.9 Affected: >= 3.1.0, < 3.1.6 Affected: >= 3.2.0, < 3.2.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42277",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T14:29:07.152170Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T21:28:14.132Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-vg3h-35f7-7w6r"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "onyx",
          "vendor": "onyx-dot-app",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.0.9"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.0, \u003c 3.1.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.2.0, \u003c 3.2.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows any authenticated user to download any other user\u0027s uploaded files by providing the file UUID. The endpoint verifies the caller is authenticated but never checks that the file belongs to them. An attacker who knows or obtains a file UUID can access confidential documents, chat attachments, and other files uploaded by any user in the system. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "CWE-639: Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T03:51:11.520Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-vg3h-35f7-7w6r",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-vg3h-35f7-7w6r"
        }
      ],
      "source": {
        "advisory": "GHSA-vg3h-35f7-7w6r",
        "discovery": "UNKNOWN"
      },
      "title": "Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42277",
    "datePublished": "2026-05-08T03:51:11.520Z",
    "dateReserved": "2026-04-26T11:53:27.708Z",
    "dateUpdated": "2026-05-08T21:28:14.132Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42276 (GCVE-0-2026-42276)

Vulnerability from nvd – Published: 2026-05-08 03:49 – Updated: 2026-05-08 12:57

Title

Onyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessions

Summary

Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the POST /chat/stop-chat-session/{chat_session_id} endpoint lets any authenticated user stop any other user's active chat session. The endpoint checks authentication but never verifies the session belongs to the caller. An attacker who knows a chat session UUID can kill another user's LLM generation mid-stream. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-08 12:56 UTC

CWE

CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

GitHub_M mitre root

References

1 reference

URL	Tags
https://github.com/onyx-dot-app/onyx/security/adv…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
onyx-dot-app	onyx	Affected: < 3.0.9 Affected: >= 3.1.0, < 3.1.6 Affected: >= 3.2.0, < 3.2.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42276",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T12:56:45.370877Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T12:57:18.681Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "onyx",
          "vendor": "onyx-dot-app",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.0.9"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.0, \u003c 3.1.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.2.0, \u003c 3.2.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the POST /chat/stop-chat-session/{chat_session_id} endpoint lets any authenticated user stop any other user\u0027s active chat session. The endpoint checks authentication but never verifies the session belongs to the caller. An attacker who knows a chat session UUID can kill another user\u0027s LLM generation mid-stream. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "CWE-639: Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T03:51:03.272Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w"
        }
      ],
      "source": {
        "advisory": "GHSA-rw6w-hp62-gc8w",
        "discovery": "UNKNOWN"
      },
      "title": "Onyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessions"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42276",
    "datePublished": "2026-05-08T03:49:56.765Z",
    "dateReserved": "2026-04-26T11:53:27.708Z",
    "dateUpdated": "2026-05-08T12:57:18.681Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63178 (GCVE-0-2026-63178)

Vulnerability from cvelistv5 – Published: 2026-08-17 21:30 – Updated: 2026-08-18 15:43

Title

Onyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosure

Summary

Onyx is an open-source AI platform. Prior to 4.3.0, Onyx Enterprise Edition's PATCH /manage/admin/user-group/{user_group_id} and POST /manage/admin/user-group/{user_group_id}/add-users endpoints in ee/onyx/server/user_group/api.py call update_user_group and add_users_to_user_group in ee/onyx/db/user_group.py without enforcing _validate_curator_can_modify_group, allowing a curator to add accounts to arbitrary groups and obtain document access through get_acl_for_user and the OpenSearch access_control_list filter. This issue is fixed in version 4.3.0.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 15:42 UTC

CWE

CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

GitHub_M mitre root

References

6 references

URL	Tags
https://github.com/onyx-dot-app/onyx/security/adv…	x_refsource_CONFIRM
https://github.com/onyx-dot-app/onyx/pull/12525	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/pull/12549	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/commit/46e19…	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/commit/b9e1c…	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
onyx-dot-app	onyx	Affected: < 4.3.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63178",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T15:42:41.983120Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T15:43:08.077Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-7f48-vgpj-h95m"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "onyx",
          "vendor": "onyx-dot-app",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 4.3.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Onyx is an open-source AI platform. Prior to 4.3.0, Onyx Enterprise Edition\u0027s PATCH /manage/admin/user-group/{user_group_id} and POST /manage/admin/user-group/{user_group_id}/add-users endpoints in ee/onyx/server/user_group/api.py call update_user_group and add_users_to_user_group in ee/onyx/db/user_group.py without enforcing _validate_curator_can_modify_group, allowing a curator to add accounts to arbitrary groups and obtain document access through get_acl_for_user and the OpenSearch access_control_list filter. This issue is fixed in version 4.3.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "CWE-639: Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T21:30:40.463Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-7f48-vgpj-h95m",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-7f48-vgpj-h95m"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/pull/12525",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/pull/12525"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/pull/12549",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/pull/12549"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/commit/46e19cc2750fed659488cb12a1f171016ba5a099",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/commit/46e19cc2750fed659488cb12a1f171016ba5a099"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/commit/b9e1c6894be3c237283f4b5fd4eb0af935b40664",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/commit/b9e1c6894be3c237283f4b5fd4eb0af935b40664"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/releases/tag/v4.3.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/releases/tag/v4.3.0"
        }
      ],
      "source": {
        "advisory": "GHSA-7f48-vgpj-h95m",
        "discovery": "UNKNOWN"
      },
      "title": "Onyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosure"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-63178",
    "datePublished": "2026-08-17T21:30:40.463Z",
    "dateReserved": "2026-07-15T22:13:00.720Z",
    "dateUpdated": "2026-08-18T15:43:08.077Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-71424 (GCVE-0-2026-71424)

Vulnerability from cvelistv5 – Published: 2026-08-17 21:28 – Updated: 2026-08-18 17:47

Title

Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers

Summary

Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another user's OAuth Authorization header because OnyxTokenStorage.set_tokens and OnyxTokenStorage.set_client_info in backend/onyx/server/features/mcp/api.py copy per-user tokens into a shared admin MCPConnectionConfig row and _db_mcp_server_to_api_mcp_server returns that row through auth_template.headers to any BASIC_ACCESS user. This issue is fixed in versions 3.1.10, 3.2.14, and 4.0.0.

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 17:28 UTC

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
CWE-863 - Incorrect Authorization

Assigner

GitHub_M mitre root

References

8 references

URL	Tags
https://github.com/onyx-dot-app/onyx/security/adv…	x_refsource_CONFIRM
https://github.com/onyx-dot-app/onyx/pull/11238	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/pull/11242	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/pull/11243	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/commit/3f3d7…	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/commit/4001c…	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/commit/b1039…	x_refsource_MISC
https://github.com/onyx-dot-app/onyx/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
onyx-dot-app	onyx	Affected: < 3.1.10 Affected: >= 3.2.0, < 3.2.14 Affected: >= 3.3.0-beta.0, < 4.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-71424",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T17:28:35.060950Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T17:47:10.013Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "onyx",
          "vendor": "onyx-dot-app",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.1.10"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.2.0, \u003c 3.2.14"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.3.0-beta.0, \u003c 4.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx\u0027s GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another user\u0027s OAuth Authorization header because OnyxTokenStorage.set_tokens and OnyxTokenStorage.set_client_info in backend/onyx/server/features/mcp/api.py copy per-user tokens into a shared admin MCPConnectionConfig row and _db_mcp_server_to_api_mcp_server returns that row through auth_template.headers to any BASIC_ACCESS user. This issue is fixed in versions 3.1.10, 3.2.14, and 4.0.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T21:28:32.814Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-q62f-rv3h-f822",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-q62f-rv3h-f822"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/pull/11238",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/pull/11238"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/pull/11242",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/pull/11242"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/pull/11243",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/pull/11243"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/commit/3f3d79d1a7722fdc84a1c61c8aa830d890017e9e",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/commit/3f3d79d1a7722fdc84a1c61c8aa830d890017e9e"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/commit/4001cedd0a8968723bfe95dd188914ed56777910",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/commit/4001cedd0a8968723bfe95dd188914ed56777910"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/commit/b103937888fd5008067c2bb6eb6e5424576394f2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/commit/b103937888fd5008067c2bb6eb6e5424576394f2"
        },
        {
          "name": "https://github.com/onyx-dot-app/onyx/releases/tag/v4.0.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/releases/tag/v4.0.0"
        }
      ],
      "source": {
        "advisory": "GHSA-q62f-rv3h-f822",
        "discovery": "UNKNOWN"
      },
      "title": "Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-71424",
    "datePublished": "2026-08-17T21:28:32.814Z",
    "dateReserved": "2026-08-06T16:28:51.182Z",
    "dateUpdated": "2026-08-18T17:47:10.013Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42277 (GCVE-0-2026-42277)

Vulnerability from cvelistv5 – Published: 2026-05-08 03:51 – Updated: 2026-05-08 21:28

Title

Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files

Summary

Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows any authenticated user to download any other user's uploaded files by providing the file UUID. The endpoint verifies the caller is authenticated but never checks that the file belongs to them. An attacker who knows or obtains a file UUID can access confidential documents, chat attachments, and other files uploaded by any user in the system. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-08 14:29 UTC

CWE

CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

GitHub_M mitre root

References

1 reference

URL	Tags
https://github.com/onyx-dot-app/onyx/security/adv…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
onyx-dot-app	onyx	Affected: < 3.0.9 Affected: >= 3.1.0, < 3.1.6 Affected: >= 3.2.0, < 3.2.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42277",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T14:29:07.152170Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T21:28:14.132Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-vg3h-35f7-7w6r"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "onyx",
          "vendor": "onyx-dot-app",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.0.9"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.0, \u003c 3.1.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.2.0, \u003c 3.2.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows any authenticated user to download any other user\u0027s uploaded files by providing the file UUID. The endpoint verifies the caller is authenticated but never checks that the file belongs to them. An attacker who knows or obtains a file UUID can access confidential documents, chat attachments, and other files uploaded by any user in the system. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "CWE-639: Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T03:51:11.520Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-vg3h-35f7-7w6r",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-vg3h-35f7-7w6r"
        }
      ],
      "source": {
        "advisory": "GHSA-vg3h-35f7-7w6r",
        "discovery": "UNKNOWN"
      },
      "title": "Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42277",
    "datePublished": "2026-05-08T03:51:11.520Z",
    "dateReserved": "2026-04-26T11:53:27.708Z",
    "dateUpdated": "2026-05-08T21:28:14.132Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42276 (GCVE-0-2026-42276)

Vulnerability from cvelistv5 – Published: 2026-05-08 03:49 – Updated: 2026-05-08 12:57

Title

Onyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessions

Summary

Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the POST /chat/stop-chat-session/{chat_session_id} endpoint lets any authenticated user stop any other user's active chat session. The endpoint checks authentication but never verifies the session belongs to the caller. An attacker who knows a chat session UUID can kill another user's LLM generation mid-stream. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-08 12:56 UTC

CWE

CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

GitHub_M mitre root

References

1 reference

URL	Tags
https://github.com/onyx-dot-app/onyx/security/adv…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
onyx-dot-app	onyx	Affected: < 3.0.9 Affected: >= 3.1.0, < 3.1.6 Affected: >= 3.2.0, < 3.2.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42276",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T12:56:45.370877Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-08T12:57:18.681Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "onyx",
          "vendor": "onyx-dot-app",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.0.9"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.0, \u003c 3.1.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.2.0, \u003c 3.2.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the POST /chat/stop-chat-session/{chat_session_id} endpoint lets any authenticated user stop any other user\u0027s active chat session. The endpoint checks authentication but never verifies the session belongs to the caller. An attacker who knows a chat session UUID can kill another user\u0027s LLM generation mid-stream. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "CWE-639: Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-08T03:51:03.272Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w"
        }
      ],
      "source": {
        "advisory": "GHSA-rw6w-hp62-gc8w",
        "discovery": "UNKNOWN"
      },
      "title": "Onyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessions"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42276",
    "datePublished": "2026-05-08T03:49:56.765Z",
    "dateReserved": "2026-04-26T11:53:27.708Z",
    "dateUpdated": "2026-05-08T12:57:18.681Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

8 vulnerabilities by onyx-dot-app

CVE-2026-71424 (GCVE-0-2026-71424)

CVE-2026-63178 (GCVE-0-2026-63178)

CVE-2026-42277 (GCVE-0-2026-42277)

CVE-2026-42276 (GCVE-0-2026-42276)

CVE-2026-63178 (GCVE-0-2026-63178)

CVE-2026-71424 (GCVE-0-2026-71424)

CVE-2026-42277 (GCVE-0-2026-42277)

CVE-2026-42276 (GCVE-0-2026-42276)

Find a vulnerability

Search criteria ⓘ Use this form to refine search results. Full-text search supports keyword queries with ranking and filtering. You can combine vendor, product, and sources to narrow results. Enable “Apply ordering” to sort by date instead of relevance.

8 vulnerabilities by onyx-dot-app

CVE-2026-71424 (GCVE-0-2026-71424)

CVE-2026-63178 (GCVE-0-2026-63178)

CVE-2026-42277 (GCVE-0-2026-42277)

CVE-2026-42276 (GCVE-0-2026-42276)

CVE-2026-63178 (GCVE-0-2026-63178)

CVE-2026-71424 (GCVE-0-2026-71424)

CVE-2026-42277 (GCVE-0-2026-42277)

CVE-2026-42276 (GCVE-0-2026-42276)

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.