Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-85693

Chatbot UI Cross-User Private File Content Disclosure via Retrieval API

CVSS 4.0 7.1 HIGHCVSS 3.1 6.5 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-85693

Published

Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers to access private file content belonging to other users by supplying arbitrary file UUIDs. The endpoint uses a service-role Supabase client that bypasses row-level security and fails to validate file ownership, enabling attackers to retrieve indexed content chunks from victim files through crafted POST requests.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-85693

Published

chatbot-ui

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "mckaywrigley",
                    "product": "chatbot-ui",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0",
                            "lessThanOrEqual": "81328b61d2a4ab597a7a057be70e785cf756d9f8",
                            "status": "affected",
                            "versionType": "git"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON