CVE-2026-125397

A user could access NocoBase AI employees outside their assigned role

NocoBase project / VulnCheck · NocoBase AI employee and sub-agent authorization

First documented disclosure · Review checkpoint

Summary

An authenticated user could select an enabled AI employee outside the set assigned to the user’s role.

Severity and exploitation evidence

High · 7.1/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed sources describe the vulnerability and its conditions. They do not identify malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The lookup accepted a requested employee name in place of the role’s permitted set.

Conditions required

The user is authenticated, can invoke employee lookup or delegation, and the selected employee is enabled.

Potential impact

The user could inspect the employee’s prompt and tool settings or request work using the employee’s available tools.

Affected versions and configurations

2.1.0 through 2.2.41 in the issuing CNA record.

Fix and mitigation status

No released fix is identified by the reviewed sources.

Practical next steps

Restrict employee lookup and delegation to trusted roles pending a confirmed fix. Verify that role restrictions apply to delegated employees.

Operating lesson

Intersect requested agent identities with the caller’s authorized set.

Evidence and limits

The upstream pull request proposes preserving the role restriction and remained open at review. The CNA does not identify a fixed release.

Sources