The vulnerability is an AQL injection in YETI’s search endpoints that lets an authenticated low-privileged user insert arbitrary AQL sub-expressions via the sort and filter_aliases parameters. The attacker can trigger error messages, read data from internal collections such as users, modify the logic of searches, enumerate schema details, and consume excessive database resources. This capability exposes sensitive data and can degrade availability, but the injection does not enable arbitrary write operations.

Yeti Platform’s Yeti product is affected in all releases 2.5.0 and earlier. No fixed version is available as of this review.

With a CVSS v3.1 score of 7.6 the vulnerability is considered high severity. The EPSS score is not available, and it is not listed in the CISA KEV catalog. The attack requires valid authenticated credentials and flows through the listed search endpoints, enabling the attacker to trigger the injection. Because the attack uses only reading and filtering, a low-privileged user can still exploit the flaw, which increases its risk.