CVE-2026-125397
NocoBase plugin-ai 2.1.0 through 2.2.41 Authorization Bypass via Sub-Agent Username Override
CVSS Score
7.1
EPSS Score
0.0%
EPSS Percentile
0th
NocoBase plugin-ai 2.1.0 through 2.2.41 contains an authorization bypass vulnerability in getAccessibleAIEmployee() that lets authenticated users access unassigned AI employees by overriding the role-derived filter with a supplied username. Attackers can use the dispatch-sub-agent-task tool to run ungranted AI employees with their tools and permissions, and get-ai-employee to read their prompts and tool configuration.
| CWE | CWE-863 |
| Vendor | nocobase |
| Product | nocobase |
| Published | Nov 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for nocobase nocobase
Be the first to know when new high vulnerabilities affecting nocobase nocobase are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
High
Availability
None
Affected Versions
nocobase / nocobase
2.1.0 ≤ 2.2.41
References
github.com: https://github.com/nocobase/nocobase/pull/11009 github.com: https://github.com/nocobase/nocobase/commit/ae5a05954e20608de510c33847089269cb37411a github.com: https://github.com/nocobase/nocobase github.com: https://github.com/nocobase/nocobase/blob/v2.2.41/packages/plugins/@nocobase/plugin-ai/src/ai/tools/sub-agents/shared.ts#L26-L33 vulncheck.com: https://www.vulncheck.com/advisories/nocobase-plugin-ai-2.1.0-through-2.2.41-authorization-bypass-via-sub-agent-username-override
Credits
Fiona