Vulnerability · Published Nov 3, 2026 · Assigned by VulnCheck

CVE-2026-121558AuditPilot before commit 4669c93 RAG Project-Scope Authorization Bypass via project_id

Medium 4.3

In plain English

A medium-severity authorization bypass via user-controlled key in intelligent-audit-system from Ricky-7-Yan. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.3%top 77.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.py that allows authenticated users to read other projects' knowledge by supplying project_id. Attackers with read:knowledge scoped to one project can set context.project_id via GET /api/knowledge/query or POST /api/research/answer to retrieve same-tenant project knowledge chunks.

Affected products (as reported)

Vendor	Product	Versions
Ricky-7-Yan	intelligent-audit-system	0 – before 4669c93f3a7403a0e242bef14d771beef0b4356b

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

GitHub Issue #7 issue-tracking
https://github.com/Ricky-7-Yan/intelligent-audit-system product
Fix commit patch
https://github.com/Ricky-7-Yan/intelligent-audit-system/blob/e4f1bf1c92cb14dd18bf0e11f4688fd1e346c9b9/rag/agentic_rag.py#L342-L365 technical-description
https://github.com/Ricky-7-Yan/intelligent-audit-system/blob/e4f1bf1c92cb14dd18bf0e11f4688fd1e346c9b9/web/main.py#L1197-L1206 technical-description
VulnCheck Advisory: AuditPilot before commit 4669c93 RAG Project-Scope Authorization Bypass via project_id third-party-advisory