MediumVulnerability
CVE-2026-125386: langchain4j-aideepin insecure direct object reference in message endpoints
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-125386
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
langchain4j-aideepin through 3.32.0 contains an insecure direct object reference flaw in CharacterMessageController. Authenticated users can access other users' message references because owner checks are missing. Supplying another user's message uuid to the knowledge-embedding-ref, memory-embedding-ref, or graph-ref endpoints returns knowledge-base chunks, long-term memory text, and knowledge-graph data.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- InfoGem5-Shark: Smaug-based Heterogeneous Deep Learning Accelerator Security and Robustness Evaluation and Characterization FrameworkSimilar attack · OpenAlex (peer-reviewed AI security)
- MediumCVE-2026-88982: Kubeflow Pipelines execution cache exposes cached outputs across namespacesSimilar attack · NVD/CVE Database
- MediumChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data ExfiltrationSimilar attack · Check Point Research
- MediumGoogle: LLMjacking attacks rack up $1 million in cloud AI chargesSimilar attack · BleepingComputer
- LowExtracting System Prompt of LLM Services in Complex (Agentic) Settings: Hierarchical Optimization and Reliable Evaluation MetricsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)