CVE-2026-82271

MEDIUM 6.5

R2R Missing Ownership Check Allows Modifying Other Users' Conversations

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users' conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users' conversation histories, corrupting state and injecting malicious content.

CWE	CWE-639
Vendor	sciphi-ai
Product	r2r
Published	Aug 28, 2026

Stay Ahead of the Next One

Get instant alerts for sciphi-ai r2r

Be the first to know when new medium vulnerabilities affecting sciphi-ai r2r are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Affected Versions

SciPhi-AI / R2R

0 ≤ 3.6.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/SciPhi-AI/R2R/issues/2292 github.com: https://github.com/SciPhi-AI/R2R github.com: https://github.com/SciPhi-AI/R2R/blob/9c5a94d151f90876bd7eb860f300a8fd662dc481/py/core/main/api/v3/conversations_router.py vulncheck.com: https://www.vulncheck.com/advisories/r2r-missing-ownership-check-allows-modifying-other-users-conversations

Credits

🔍 George Chen