CVE-2026-126767

An authenticated REMS user could obtain the assistant's hidden instructions

OpsTree Solutions · REMS root-cause analysis assistant

First documented disclosure · Review checkpoint

Summary

The chat assistant followed untrusted instructions that displaced its configured rules. Internal orchestration instructions could be revealed in chat.

Severity and exploitation evidence

Medium · 5.3/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The chat assistant followed untrusted instructions that displaced its configured rules.

Conditions required

The user had an authenticated session with the root-cause analysis assistant.

Potential impact

Internal orchestration instructions could be revealed in chat.

Affected versions and configurations

Through 1.0.0.

Fix and mitigation status

The CNA does not identify a fixed release.

Practical next steps

Limit access to the assistant and keep secrets and authorization decisions outside model instructions.

Operating lesson

Check the authority granted to the affected component against the operation a user expects.

Evidence and limits

The assigning CNA gives September 20 as the public date. Its own advisory and CVE record appeared November 11.

Sources