{"data":{"id":"ac683442-8904-4927-955e-9ec14e2c6f3d","title":"CVE-2026-55583: Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.9.0, Twenty was vulnerable to a…","summary":"Twenty, an open-source CRM platform, prior to 2.9.0 contained a cross-workspace insecure direct object reference (IDOR) in the AI agent monitor's AgentTurnResolver, in packages/twenty-server/src/engine/metadata-modules/ai/ai-agent-monitor/resolvers/agent-turn.resolver.ts. The agentTurns(agentId) query and evaluateAgentTurn(turnId) mutation looked up rows without checking the workspaceId, and the same flaw appears in agent-turn-grader.service.ts. Any authenticated user with the AI settings flag could read another workspace's full chat history, tool calls and outputs, or push that workspace's turn into the default LLM, given the victim's agentId or turnId, which are exposed in the settings page URL.","solution":"Fixed in version 2.9.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-55583","publishedAt":"2026-06-24T20:16:33.100Z","cveId":"CVE-2026-55583","cweIds":["CWE-639"],"cvssScore":"7.6","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Twenty CRM","AI agent monitor","AI agent turns","agentTurnEvaluation"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Twenty AI agent monitor cross-workspace IDOR in agentTurns and evaluateAgentTurn","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00227,"epssCheckedAt":"2026-11-10T00:11:22.330Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-10T00:11:46.308Z","patchAvailable":null,"disclosureDate":"2026-06-24T20:16:33.100Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}