Description
Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the collection using the offset cursor.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| cheshire-cat-ai | core | 1.8.0 – ≤ 1.9.2 | — |
References
- GitHub Issue #1136 issue-tracking
- https://github.com/cheshire-cat-ai/core/blob/1.9.2/core/cat/routes/memory/points.py#L350 technical-description
- https://github.com/cheshire-cat-ai/core/blob/1.9.2/core/cat/looking_glass/stray_cat.py technical-description
- https://github.com/cheshire-cat-ai/core product
- VulnCheck Advisory: Cheshire Cat AI Memory Collection Endpoint Information Disclosure third-party-advisory