intelligent-audit-system vulnerabilities

CVEs whose affected-version data names the intelligent-audit-system package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121558Medium· 4.3

5d ago

AuditPilot before commit 4669c93 RAG Project-Scope Authorization Bypass via project_id

AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.py that allows authenticated users to read other projects' knowledge by supplying project_id. Attackers with read:kno…

▾ SunlitRicky-7-Yan · intelligent-audit-systemEPSS 0.30%via CVEORG