Description
Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the collection using the offset cursor.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
cheshire-cat-ai core
Default version status: unaffected
1.8.0 to ≤ 1.9.2affected
pkg:github/cheshire-cat-ai/coreReferences
- https://github.com/cheshire-cat-ai/core/issues/1136 ↗
- https://github.com/cheshire-cat-ai/core/blob/1.9.2/core/cat/routes/memory/points.py#L350 ↗
- https://github.com/cheshire-cat-ai/core/blob/1.9.2/core/cat/looking_glass/stray_cat.py ↗
- https://github.com/cheshire-cat-ai/core ↗
- https://www.vulncheck.com/advisories/cheshire-cat-ai-memory-collection-endpoint-information-disclosure ↗