135 matches found
EUVD-2026-102503
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/filebbox to...
CVE-2026-111363
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/filebbox to...
CVE-2026-111363 BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/filebbox to...
CVE-2026-111363 BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/filebbox to...
CVE-2026-111363
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/filebbox to...
CVE-2026-111363
The BISHENG platform, up to version 3.0.0-beta4 , is vulnerable to an Insecure Direct Object Reference (IDOR) (CWE-639) in the /api/v1/knowledge/file_bbox endpoint. This flaw allows authenticated low-privileged users to access and read parsed documents belonging to other users or tenants by provi...
CVE-2026-111363 BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/filebbox to...
PT-2026-115303
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary file id values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/file bbox to...
CVE-2026-111363: Authorization Bypass Through User-Controlled Key
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/filebbox to...
PT-2026-114783
CERT/CC disclosed three DataElement Bisheng vulnerabilities CVE-2026-96679, CVE-2026-96681, CVE-2026-100156 allowing unauthenticated admin takeover. Bisheng CVE202696679 CVE202696681 CVE2026100156 CERTCC LLMSecurity Cybersecurity https://t.co/ZrY7qNDOvz...
PT-2026-114780
CERT/CC disclosed three DataElement Bisheng vulnerabilities CVE-2026-96679, CVE-2026-96681, CVE-2026-100156 allowing unauthenticated admin takeover. Bisheng CVE202696679 CVE202696681 CVE2026100156 CERTCC LLMSecurity Cybersecurity https://t.co/ZrY7qNDOvz...
DataElem BISHENG Authorization Issue Vulnerability
DataElem BISHENG 3.0.0-beta4 and earlier versions have an authorization issue vulnerability. This vulnerability stems from insecure direct object references, which may allow authenticated low-privilege users to read other users’ parsed documents by providing arbitrary fileid values. It also allow...
PT-2026-114360
Three critical authentication bypass flaws in Bisheng open-source LLM DevOps platform allow unauthenticated attackers to gain full admin control and expose cross-user data. Technical Breakdown: - CVE-2026-96679 Legacy SSO Bypass: The POST /user/sso endpoint accepts arbitrary usernames in JSON...
Bisheng has authentication bypass vulnerabilities
Overview Bisheng contains three vulnerabilities: a pre-authentication account takeover mechanism via a legacy single sign-on SSO endpoint; an Insecure Direct Object Reference IDOR vulnerability that exposes cross-user workflow data; and prior to version 2.5.0, authenticated attackers could perfor...
CVE-2026-51861
bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py...
CVE-2026-51860
bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/taskexec.py...
CVE-2026-51859
bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in savedownloadfile src/backend/bisheng/core/cache/utils.py:290...
CVE-2026-51861
bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py...
PT-2026-103610
Name of the Vulnerable Software and Affected Versions bisheng versions 2.3.0 through 2.4.0 Description A directory traversal issue exists in the save download file function located in src/backend/bisheng/core/cache/utils.py:290. Directory traversal is a flaw that allows an attacker to access file...