Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-57476

Deloitte AI Assist for Customer unauthenticated RAG corpus read and write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisa-cg

Description

Deloitte AI Assist for Customer exposed unauthenticated API endpoints that allowed an attacker with knowledge of additional parameters to read from or inject content into the retrieval-augmented generation (RAG) corpus. On 2026-03-25, AI Assist for Customer restricted network access and enforced authentication for the previously exposed endpoints.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Deloitte AI Assist for Customer

Default version status: unknown

  • 0 to < 2026-03-25affected
  • 2026-03-25unaffected

References