Vulnerabilidades do UnicomAI Wanwu
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam UnicomAI Wanwu: 4 registro(s), com versões afetadas e correções.
CVE-2026-108855
Média · 5.4
CWE-862 11/10/2026
UnicomAI Wanwu through 0.6.5 Missing Authorization via DELETE /v1/appspace/app/publish
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys for arbitrary apps via the unpublish endpoint. Attackers can supply a target appId and appType from the exploration marketplace to delete other users' api_key rows across organizations, cutting off MCP and OpenAPI client access.
CVE-2026-108854
Média · 5.4
CWE-639 11/10/2026
Wanwu before 0.6.3 IDOR AppKey Deletion via DELETE /v1/appspace/app/key
Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user to delete other users' legacy AppKeys by supplying a numeric apiId. Attackers can iterate sequential key IDs against DELETE /v1/appspace/app/key to revoke AppKeys across organizations, breaking MCP and OpenAPI clients until owners issue new keys.
CVE-2026-108856
Média · 4.2
CWE-639 11/10/2026
UnicomAI Wanwu through 0.6.5 Authorization Bypass via /v1/appspace/app/key AppKey Minting
UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers via POST /v1/appspace/app/key. Attackers supplying a victim's MCP server UUID with appType mcpserver can open MCP sessions and invoke the server's tools using the victim's upstream authentication.
CVE-2026-108853
Alta · 8.1
CWE-639 11/10/2026
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that...
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants' agent or RAG applications by supplying their appId. Attackers can send requests to DELETE /v1/appspace/app with guessed sequential assistant IDs to permanently delete victims' applications, workflows, conversations, and associated data.