Getrebuild vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Getrebuild products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-110611 Medium · 5.9 CWE-639 Oct 14, 2026

REBUILD through 4.5.0 Authorization Bypass via aibot2 Chat Endpoints chatid

REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifying ownership. Authenticated low-privilege users can supply another user's chatid to chat-init, chat-delete, chat-feedback, or chat-stream-stop to read, delete, exfiltrate, or interrupt AI assistant conversations.