GHSA-9h64-2846-7x7f: Axonflow fixed bugs by implementing multi-tenant isolation and access-control hardening

Summary

AxonFlow's GHSA-9h64-2846-7x7f advisory consolidates eight bug fixes in the v7.1.3 to v7.5.0 window, closing multi-tenant isolation, access-control and policy-enforcement defects. Affected versions are below 7.5.0, with individual items affecting different earlier minors. A body-supplied org_id could override the authenticated org, letting one tenant's requests be recorded in another tenant's audit log and evaluated under the wrong policy set.

Mitigation

Upgrade to AxonFlow platform v7.5.0 or later. No configuration changes are required. For users who cannot upgrade immediately, the source gives item-specific mitigations: for items 1-5, ensure the agent middleware sets X-Org-ID / X-Tenant-ID from authenticated identity at the ingress and never accepts body-supplied identity; for item 8 (Community SaaS), set SQLI_ACTION=block explicitly via the agent task definition, which v7.5.0 makes the default.

Related items

• InfoMicrosoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 NeuronsSimilar attack · The Hacker News
• HighCVE-2026-63651: LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect…Similar attack · NVD/CVE Database
• HighCVE-2026-125271 - AWS API MCP Server Security Policy Bypass via Incorrect Operation Name NormalizationSimilar attack · AWS Security Bulletins
• InfoLocation Matters: Sparse Latent-Variance Attacks for Face Privacy against Diffusion PersonalizationSimilar attack · Arxiv (cs.RO + cs.CV security)
• MediumCVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure VulnerabilitySimilar attack · MSRC Security Update Guide