Skip to content
OpenAdvisories

Vendor

QuivrHQ

2 known vulnerabilities.

Products

quivr 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-82284

    Quivr Chat Endpoints Missing Ownership Validation

    Quivr versions through 0.0.322 fail to validate chat ownership in the GET /chat/{chat_id}/history, DELETE /chat/{chat_id}, and POST /chat/{chat_id}/question/answer endpoints. Authenticated attackers can read other users' conversation histories including priva…

    QuivrHQ quivr
  • High 7.1
    CVE-2026-82280

    Quivr Prompt Endpoints Missing Ownership Validation

    Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier. Attackers with read-only access to shared brains can read exposed prompt identifiers and overwrite system prompts affecting…

    QuivrHQ quivr