CyberRota Analysis
AI-GeneratedThe AI Agent Automation platform prior to version 0.9.1 is vulnerable due to improper authentication in its memory management functions, allowing authenticated attackers to access, delete, or clear another user's memory data. This vulnerability compromises tenant isolation, leading to unauthorized disclosure of sensitive information such as conversation history and task data. Organizations using this platform should prioritize updating to version 0.9.1 to mitigate the risk of data breaches and loss.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory _id without verifying through the related Agent that the record belongs to req.user. An authenticated attacker who knows or obtains another user's identifiers can read victim AgentMemory content, including conversation history, agent context, task data, embeddings, and metadata, delete an individual victim memory, or clear all memory belonging to a victim agent. This breaks tenant isolation and causes unauthorized disclosure and data loss. This issue is fixed in version 0.9.1.