Authorization Bypass Vulnerability in NocoBase Plugin by NocoBase

CVE-2026-125397

What is CVE-2026-125397?

The NocoBase plugin-ai versions 2.1.0 to 2.2.41 feature an authorization bypass vulnerability in the getAccessibleAIEmployee() function. This vulnerability allows authenticated users to gain unauthorized access to unassigned AI employees by overriding the role-derived filter using a specified username. Attackers can exploit this flaw with the dispatch-sub-agent-task tool, enabling them to execute tasks with AI employees that they do not have permission to access. Additionally, they can use the get-ai-employee tool to retrieve sensitive prompts and configuration settings of these ungranted AI employees.

References