MEDIUM
getrebuild
CVE published 2026-10-14
CVE-2026-110611
CVE-2026-110611: REBUILD through 4.5.0 Authorization Bypass via aibot2 Chat Endpoints chatid. Authenticated low-privilege users can supply another user's chatid to chat-init, chat-delete, chat-feedback, or chat-stream-stop to read, delete, exfiltrate, or interrupt AI assistant conversations. This vulnerability allows unauthorized access to AI assistant conversations, potentially leading to data exposure o [truncated]