7 matches found
EUVD-2026-120549
langchain4j-aideepin through 3.32.0 contains an insecure direct object reference vulnerability in CharacterMessageController that allows authenticated users to access other users' message references due to missing owner checks. Attackers can supply another user's message uuid to the...
CVE-2026-125386
langchain4j-aideepin through 3.32.0 contains an insecure direct object reference vulnerability in CharacterMessageController that allows authenticated users to access other users' message references due to missing owner checks. Attackers can supply another user's message uuid to the...
CVE-2026-125386: moyangzhan langchain4j-aideepin: langchain4j-aideepin through 3.32.0 contains an insecure direct object reference vulnerability in…
langchain4j-aideepin through 3.32.0 contains an insecure direct object reference vulnerability in CharacterMessageController that allows authenticated users to access other users' message references due to missing owner checks. Attackers can supply another user's message uuid to the...
CVE-2026-125386 langchain4j-aideepin through 3.32.0 IDOR via /character/message reference endpoints
langchain4j-aideepin through 3.32.0 contains an insecure direct object reference vulnerability in CharacterMessageController that allows authenticated users to access other users' message references due to missing owner checks. Attackers can supply another user's message uuid to the...
CVE-2026-125386 langchain4j-aideepin through 3.32.0 IDOR via /character/message reference endpoints
langchain4j-aideepin through 3.32.0 contains an insecure direct object reference vulnerability in CharacterMessageController that allows authenticated users to access other users' message references due to missing owner checks. Attackers can supply another user's message uuid to the...
CVE-2026-125386
The langchain4j-aideepin software (versions through 3.32.0 ) is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability within the CharacterMessageController . The root cause is a missing owner check when processing message references. Authenticated users can exploit this by supply...
PT-2026-141209
langchain4j-aideepin through 3.32.0 contains an insecure direct object reference vulnerability in CharacterMessageController that allows authenticated users to access other users' message references due to missing owner checks. Attackers can supply another user's message uuid to the...