Description
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants' agent or RAG applications by supplying their appId. Attackers can send requests to DELETE /v1/appspace/app with guessed sequential assistant IDs to permanently delete victims' applications, workflows, conversations, and associated data.
Published: 2026-10-11
Score: 7.2 High
EPSS: < 1% Very Low
KEV: No
Impact: Loss of application data and denial of service
Action: Apply Patch
AI Analysis

Impact

UnicomAI Wanwu contains an insecure direct object reference that lets authenticated users with low privileges delete other tenants' applications. By sending a DELETE request to /v1/appspace/app with a guessed appId, a malicious actor can permanently remove the victim’s applications, workflows, conversations, and associated data.

Affected Systems

The vulnerability is present in all releases of UnicomAI Wanwu before version 0.6.3. Users deploying those versions are subject to the IDOR risk.

Risk and Exploitability

The CVSS score of 7.2 classifies the issue as high severity. Exploitation requires authenticated access but does not need elevated rights; attackers can enumerate sequential IDs to reach target resources. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting it is not known to be actively exploited in the wild yet, yet the ability to delete competing tenants’ data warrants immediate attention.

Generated by OpenCVE AI on October 11, 2026 at 15:01 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade UnicomAI Wanwu to version 0.6.3 or later, which contains the fix for the IDOR issue.
  • After upgrading, verify that all unauthorized DELETE operations are blocked by reviewing access logs and application behavior.
  • If an immediate upgrade is not possible, temporarily revoke DELETE /v1/appspace/app access for low‑privileged users or implement additional authorization checks to prevent cross‑tenant deletions.

Generated by OpenCVE AI on October 11, 2026 at 15:01 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
References

Tue, 13 Oct 2026 08:15:00 +0000

Type Values Removed Values Added
First Time appeared Unicomai
Unicomai wanwu
Vendors & Products Unicomai
Unicomai wanwu

Sun, 11 Oct 2026 13:45:00 +0000

Type Values Removed Values Added
Description UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants' agent or RAG applications by supplying their appId. Attackers can send requests to DELETE /v1/appspace/app with guessed sequential assistant IDs to permanently delete victims' applications, workflows, conversations, and associated data.
Title UnicomAI Wanwu before 0.6.3 IDOR via DELETE /v1/appspace/app
Weaknesses CWE-639
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H'}

cvssV4_0

{'score': 7.2, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Unicomai Wanwu
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-13T19:42:30.136Z

Reserved: 2026-10-11T13:02:03.379Z

Link: CVE-2026-108853

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-11T14:17:04.960

Modified: 2026-10-16T19:18:44.867

Link: CVE-2026-108853

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T07:57:40Z

Weaknesses
  • CWE-639

    Authorization Bypass Through User-Controlled Key