Skip to content
OpenAdvisories

Product · potpie-ai

potpie

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-85669

    potpie through 2.0.0 Missing Ownership Check via code-changes sync

    potpie through 2.0.0 fails to verify user ownership on the POST /conversations/{conversation_id}/code-changes/sync endpoint. Authenticated attackers can write arbitrary file changes into other users' conversations by supplying their conversation IDs, allowing…

    potpie-ai potpie