CVE-2026-85693
Chatbot UI Cross-User Private File Content Disclosure via Retrieval API
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers to access private file content belonging to other users by supplying arbitrary file UUIDs. The endpoint uses a service-role Supabase client that bypasses row-level security and fails to validate file ownership, enabling attackers to retrieve indexed content chunks from victim files through crafted POST requests.
| CWE | CWE-639 |
| Vendor | mckaywrigley |
| Product | chatbot-ui |
| Published | Sep 4, 2026 |
| Last Updated | Sep 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for mckaywrigley chatbot-ui
Be the first to know when new medium vulnerabilities affecting mckaywrigley chatbot-ui are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
mckaywrigley / chatbot-ui
0 ≤ 81328b61d2a4ab597a7a057be70e785cf756d9f8
References
github.com: https://github.com/mckaywrigley/chatbot-ui/issues/2028 github.com: https://github.com/mckaywrigley/chatbot-ui github.com: https://github.com/mckaywrigley/chatbot-ui/blob/81328b61d2a4ab597a7a057be70e785cf756d9f8/app/api/retrieval/retrieve/route.ts vulncheck.com: https://www.vulncheck.com/advisories/chatbot-ui-cross-user-private-file-content-disclosure-via-retrieval-api
Credits
George Chen