CVE-2026-57476 — Deloitte AI Assist for Customer unauthenticated RAG corpus read and write
Deloitte AI Assist for Customer exposed unauthenticated API endpoints that allowed an attacker with knowledge of additional parameters to read from or inject content into the re…
Published: 2026-07-10 · CVSS: 6.3 · CVSS 4.0
Deloitte AI Assist for Customer exposed unauthenticated API endpoints that allowed an attacker with knowledge of additional parameters to read from or inject content into the retrieval-augmented generation (RAG) corpus. On 2026-03-25, AI Assist for Customer restricted network access and enforced authentication for the previously exposed endpoints.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7