53AIHub versions up to 0.5.3 contain a missing authentication flaw that allows an attacker to perform unrestricted PUT requests to /api/enterprises/:id. The attacker can overwrite any enterprise’s profile, including logos and display names, enabling defacement and phishing attacks. This unauthorized modification of critical tenant data can undermine trust and facilitate credential harvesting or brand impersonation.

The vulnerability impacts the 53AIHub platform provided by 53AI. Specifically, all releases up to and including version 0.5.3 are affected, as the UpdateEnterprise function only enforces authentication checks when the IS_SAAS flag is true. Administrators should confirm whether their deployment uses these vulnerable versions and whether the IS_SAAS condition applies.

The CVSS score of 6.9 indicates a moderate severity, and the EPSS score is not reported, so the likelihood of exploitation is unknown. The flaw is not listed in CISA’s KEV catalog, suggesting no widely known attacks yet. However, the missing authentication enables any unauthenticated user with network access to the API to enumerate enterprise IDs and overwrite tenant metadata, so the potential impact remains significant.