---
id: CVE-2026-121558
title: >-
  AuditPilot before commit 4669c93 RAG Project-Scope Authorization Bypass via
  project_id
summary: >-
  AuditPilot before commit 4669c93 contains an authorization bypass
  vulnerability in _metadata_allowed in rag/agentic_rag.py that allows
  authenticated users to read other projects' knowledge by supplying project_id.
  Attackers with read:kno…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-639
vendor: Ricky-7-Yan
product: intelligent-audit-system
affected:
  - intelligent-audit-system < 4669c93f3a7403a0e242bef14d771beef0b4356b
published: '2026-11-03'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T15:17:14.947Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-121558'
references:
  - url: 'https://github.com/Ricky-7-Yan/intelligent-audit-system/issues/7'
    label: 'GitHub Issue #7'
  - url: 'https://github.com/Ricky-7-Yan/intelligent-audit-system'
  - url: >-
      https://github.com/Ricky-7-Yan/intelligent-audit-system/commit/4669c93f3a7403a0e242bef14d771beef0b4356b
    label: Fix commit
  - url: >-
      https://github.com/Ricky-7-Yan/intelligent-audit-system/blob/e4f1bf1c92cb14dd18bf0e11f4688fd1e346c9b9/rag/agentic_rag.py#L342-L365
  - url: >-
      https://github.com/Ricky-7-Yan/intelligent-audit-system/blob/e4f1bf1c92cb14dd18bf0e11f4688fd1e346c9b9/web/main.py#L1197-L1206
  - url: >-
      https://www.vulncheck.com/advisories/auditpilot-before-commit-4669c93-rag-project-scope-authorization-bypass-via-project-id
    label: >-
      VulnCheck Advisory: AuditPilot before commit 4669c93 RAG Project-Scope
      Authorization Bypass via project_id
tags:
  - cve.org
epss: 0.00298
epssPercentile: 0.22584
ingestedAt: '2026-11-05T19:30:42.978Z'
---

## Overview

AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.py that allows authenticated users to read other projects' knowledge by supplying project_id. Attackers with read:knowledge scoped to one project can set context.project_id via GET /api/knowledge/query or POST /api/research/answer to retrieve same-tenant project knowledge chunks.

## Affected

- `intelligent-audit-system < 4669c93f3a7403a0e242bef14d771beef0b4356b`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.