Description
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants' agent or RAG applications by supplying their appId. Attackers can send requests to DELETE /v1/appspace/app with guessed sequential assistant IDs to permanently delete victims' applications, workflows, conversations, and associated data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
UnicomAI Wanwu
Default version status: unaffected
0 to < 0.6.3affected
References
- https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/unicomai-wanwu-appspace-cross-owner-delete ↗
- https://github.com/UnicomAI/wanwu/blob/v0.6.2/internal/bff-service/service/appspace.go#L20-L58 ↗
- https://github.com/UnicomAI/wanwu/commit/13d0b225ec237d5a0b44730b2331efadaeb462a2 ↗
- https://github.com/UnicomAI/wanwu/releases/tag/v0.6.3 ↗
- https://github.com/UnicomAI/wanwu ↗
- https://www.vulncheck.com/advisories/unicomai-wanwu-before-0.6.3-idor-via-delete-v1-appspace-app ↗
- https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/cve-2026-108853-unicomai-wanwu-appspace-cross-owner-delete ↗