CVE-2026-82280 — Quivr Prompt Endpoints Missing Ownership Validation
Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier. Attackers with read-only access to shared…
Published: 2026-08-28 · CVSS: 7.1 · CVSS 4.0
Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier. Attackers with read-only access to shared brains can read exposed prompt identifiers and overwrite system prompts affecting all brain users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7