CVE-2026-125386

An AiDeepin account could read another user’s retrieval references

AiDeepin maintainers · langchain4j-aideepin character message references

First documented disclosure · Review checkpoint

Summary

The service returned references associated with a message without checking message ownership. Knowledge-base excerpts, long-term memory or graph references linked to that message could be disclosed.

Severity and exploitation evidence

Medium · 6.0/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The service returned references associated with a message without checking message ownership.

Conditions required

An authenticated user knew the identifier of another user’s message.

Potential impact

Knowledge-base excerpts, long-term memory or graph references linked to that message could be disclosed.

Affected versions and configurations

Through 3.32.0.

Fix and mitigation status

No corrected release is identified by the CNA.

Practical next steps

Restrict access to the affected reference operations until ownership checks are verified.

Operating lesson

Check the authority granted to the affected component against the operation a user expects.

Evidence and limits

The CVE is distinct from CVE-2026-121938, which concerns character chat history. This record concerns the retrieval references associated with a message. The public disclosure was on 2026-11-04. The CVE record was published on 2026-11-09.

Sources