Insufficient Isolation in Yuxi Large-Model Development Platform

CVE-2026-97693

What is CVE-2026-97693?

The Yuxi knowledge base and graph agent development platform has a vulnerability stemming from insufficient isolation between execution-capable Docker sandboxes and trusted application services. This flaw permits low-privileged authenticated users to breach sandbox boundaries, allowing them to access APIs, files, and secrets of other tenants. Attackers can execute commands in active sandboxes and manipulate the sandbox state through unauthenticated means. If default service credentials are left unchanged, they may be exploited to gain unauthorized access to shared internal services. This potentially leads to cross-tenant data disclosure, modification, or even denial of service by deleting sandboxes, all without needing to escape the container or exploit kernel vulnerabilities. The vulnerability is addressed in version 0.7.1, but users are advised to manually update their PostgreSQL, Neo4j, or MinIO credentials that were previously set to default values, as these will not be automatically rotated during the upgrade.

References