GHSA-q3v2-xj35-9grx: Umbraco.AI discloses sensitive application configuration values

Summary

Umbraco.AI discloses sensitive application configuration values to a user with elevated privileges under certain configurations. Exploitation requires access to the AI section of the backoffice and a specific custom AI provider, and disclosure could expose secret material such as credentials, potentially enabling further compromise.

Mitigation

Patched in 1.14.0. The source states that the patch is a breaking change requiring a version jump, and that a workaround is not recommended.

Related items

• MediumCVE-2026-108759: mistral.rs sandbox escape via symlinks in mistralrs-code-execSimilar attack · NVD/CVE Database
• MediumCVE-2026-108575: BerriAI LiteLLM improper authorization in secret resolution via api_keySimilar attack · NVD/CVE Database
• MediumCVE-2026-108574: BerriAI LiteLLM authorization bypass in session spend log view via session_idSimilar attack · NVD/CVE Database
• MediumCVE-2026-108670: JeecgBoot missing authorization in AiragPromptsControllerSimilar attack · NVD/CVE Database
• MediumCVE-2026-108600: open-multi-agent link following flaw in file_write tool sandboxSimilar attack · NVD/CVE Database