The vulnerability originates from an authorization bypass in the _metadata_allowed function located in rag/agentic_rag.py. It enables authenticated users to supply any project_id and retrieve knowledge chunks that belong to other projects within the same tenant, thereby revealing confidential audit data. This weakness is characterized as an Access Control Failure (CWE-639).

Affected product: the intelligent‑audit‑system developed by Ricky‑7‑Yan. The flaw exists in all builds prior to commit 4669c93, particularly in the API endpoints /api/knowledge/query and /api/research/answer. No patched release is currently listed, so users should monitor the project’s release history for a fix that removes the bypass.

The CVSS score of 2.3 indicates a low overall severity, and EPSS is not reported. The exploit requires only a user with a read:knowledge role for a single project, a capability typically granted within normal operations. By altering the project_id parameter on the exposed API calls, an attacker can read sensitive content from other projects within the same tenant. While the vulnerability does not provide privilege escalation or destructive effects, it permits data exfiltration that could compromise confidentiality.