Description
Quivr versions through 0.0.322 fail to validate chat ownership in the GET /chat/{chat_id}/history, DELETE /chat/{chat_id}, and POST /chat/{chat_id}/question/answer endpoints. Authenticated attackers can read other users' conversation histories including private knowledge base content, delete arbitrary chats, and inject fabricated messages into other users' conversations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QuivrHQ | quivr | ≤ 0.0.322 | — |
References
- GitHub Issue #3697 issue-tracking
- https://github.com/QuivrHQ/quivr product
- Vulnerable code: chat_routes.py technical-description
- VulnCheck Advisory: Quivr Chat Endpoints Missing Ownership Validation third-party-advisory