CVE-2026-108853 UnicomAI CVE debrief

Who should care

Defenders responsible for systems using UnicomAI Wanwu, particularly those with versions before 0.6.3, should assess potential exposure and prioritize remediation. This includes reviewing relevant monitoring, detection, and logs for exposed assets that need extra review, and tracking exceptions, retesting remediated assets, and closing the item only after evidence is documented. Operators, platform administrators, vulnerability management teams, and IT and

Why it matters

CVE-2026-108853 is a high-severity vulnerability in UnicomAI Wanwu that allows authenticated low-privileged users to delete other tenants' applications, potentially leading to data loss and service disruption. Defenders should prioritize verifying exposure and assessing potential impact, focusing on systems using UnicomAI Wanwu versions before 0.6.3.

• Potential data loss due to unauthorized deletion of applications, workflows, conversations, and associated data
• Disruption of service for affected tenants
• Increased risk of lateral movement or privilege escalation for attackers
• Need for verification of exposure and potential impact on systems using vulnerable versions

Technical summary

UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants' agent or RAG applications by supplying their appId. Attackers can send requests to DELETE /v1/appspace/app with guessed sequential assistant IDs to permanently delete victims' applications, workflows, conversations, and associated data. This vulnerability could lead to data loss and service disruption for affected tenants. Defenders should prioritize verifying exposure and assessing potential impact, focusing on systems using UnicomAI Wanwu versions before 0.6.3.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, focusing on systems using UnicomAI Wanwu versions before 0.6.3.

Recommended defensive actions

• Verify exposure by checking UnicomAI Wanwu versions in use and assessing potential impact on systems using versions before 0.6.3
• Implement compensating controls, such as monitoring and access restrictions, to mitigate potential risks
• Prioritize remediation of vulnerable systems, focusing on those with high-risk exposure
• Review relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Evidence notes

The CVE record and source item provide details on the insecure direct object reference vulnerability in UnicomAI Wanwu before 0.6.3, allowing authenticated low-privileged users to delete other tenants' agent or RAG applications.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.