Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/28 4:19 p.m.7 views

CVE-2026-82280 Quivr Prompt Endpoints Missing Ownership Validation

Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier. Attackers with read-only access to shared brains can read exposed prompt identifiers and overwrite system prompts affecting all brain users...

7.1CVSS5.9AI score
SaveExploits0References7
Rows per page
Query Builder