CVE-2026-85093
Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the collection using the offset cursor.
Schwachstellenklasse
Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the collection using the offset cursor.
Quellen
- https://github.com/cheshire-cat-ai/core
- https://github.com/cheshire-cat-ai/core/blob/1.9.2/core/cat/looking_glass/stray_cat.py
- https://github.com/cheshire-cat-ai/core/blob/1.9.2/core/cat/routes/memory/points.py#L350
- https://github.com/cheshire-cat-ai/core/issues/1136
- https://www.vulncheck.com/advisories/cheshire-cat-ai-memory-collection-endpoint-information-disclosure
- https://github.com/cheshire-cat-ai/core/issues/1136
Finden Sie die Schwachstelle, bevor es ein Angreifer tut.
Melden Sie sich mit GitHub an und starten Sie Ihr erstes Audit in weniger als einer Minute. Für den kostenlosen Plan ist keine Kreditkarte nötig.