UnicomAI Wanwu up to version 0.6.5 has a missing authorization flaw that allows any authenticated user with an enabled account to delete other users' AppKeys for any application via the /v1/appspace/app/publish endpoint. By supplying a target appId and appType, an attacker can remove api_key entries belonging to other accounts across organizations, thereby disrupting their access to MCP and OpenAPI services. The vulnerability does not allow remote code execution or data exfiltration; its impact is limited to service interruption and loss of authentication credentials within the affected system.

The affected product is UnicomAI Wanwu, specifically releases up to and including version 0.6.5. Users of this version who possess any authenticated enabled account are at risk. The flaw resides in the internal app-service component that handles unpublishing requests.

The CVSS score of 5.3 reflects moderate severity. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog. Attackers must first authenticate to the system; the likely attack vector is an authenticated API call to the unpublish endpoint. Because the flaw is an authorization bypass, exploitation requires legitimate credentials but poses no additional privilege requirements beyond an enabled user account. The lack of a public exploit and absence from KEV suggest that exploitation is currently low, yet the ease of the decrypted operation warrants prompt mitigation.