Description
Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier. Attackers with read-only access to shared brains can read exposed prompt identifiers and overwrite system prompts affecting all brain users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QuivrHQ | quivr | ≤ 0.0.322 | — |
References
- GitHub Issue #3698 issue-tracking
- https://github.com/QuivrHQ/quivr product
- Vulnerable code: prompt_routes.py technical-description
- VulnCheck Advisory: Quivr Prompt Endpoints Missing Ownership Validation third-party-advisory