Skip to content
OpenAdvisories

Vendor

onyx-dot-app

6 known vulnerabilities.

Products

onyx 6
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-85700

    Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints

    Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers, allowing any authenticated user to read admin-defined API keys. Attackers with basic authentication can call GET /tool/{tool_id} or GET /tool endpoints to retrie…

    onyx-dot-app onyx
  • Medium 6.5
    CVE-2026-63178

    Onyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosure

    Onyx is an open-source AI platform. Prior to 4.3.0, Onyx Enterprise Edition's PATCH /manage/admin/user-group/{user_group_id} and POST /manage/admin/user-group/{user_group_id}/add-users endpoints in ee/onyx/server/user_group/api.py call update_user_group and a…

    onyx-dot-app onyx
  • Medium 6.5
    CVE-2026-42277

    Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files

    Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows any authenticated user to download any other user's uploaded files by providing the file UUID. The endpoint verifies the caller is auth…

    onyx-dot-app onyx
  • Medium 4.3
    CVE-2026-42276

    Onyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessions

    Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the POST /chat/stop-chat-session/{chat_session_id} endpoint lets any authenticated user stop any other user's active chat session. The endpoint checks authentication but never veri…

    onyx-dot-app onyx