Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2026/08/28 4:19 p.m.63 views

CVE-2026-82280 Quivr Prompt Endpoints Missing Ownership Validation

Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier. Attackers with read-only access to shared brains can read exposed prompt identifiers and overwrite system prompts affecting all brain users...

7.1CVSS0.00199EPSS
SaveExploits0References4
Rows per page
Query Builder