Description
Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier. Attackers with read-only access to shared brains can read exposed prompt identifiers and overwrite system prompts affecting all brain users.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
QuivrHQ quivr
Default version status: unaffected
0 to ≤ 0.0.322affected
References
- https://github.com/QuivrHQ/quivr/issues/3698 ↗
- https://github.com/QuivrHQ/quivr ↗
- https://github.com/QuivrHQ/quivr/blob/v0.0.322/backend/api/quivr_api/modules/prompt/controller/prompt_routes.py ↗
- https://www.vulncheck.com/advisories/quivr-prompt-endpoints-missing-ownership-validation ↗
- https://github.com/The-Vibe-Company/Quivr/issues/3698 ↗