Odysseus contains a missing authorization check that allows authenticated non‑admin users to invoke endpoint management routes that change the server‑wide embedding backend configuration. Without the required admin guard, the attacker can supply a malicious URL to overwrite the persisted backend URL and process environment, causing all subsequent embedding operations—such as chat messages, RAG queries, memory entries, and vault text—to be transmitted in plaintext to the attacker’s destination. Alternatively, the configuration can be deleted entirely, denying embedding services to all users. The flaw is a classic lack of authorization guard (CWE‑862).

Any installation of the odysseus-dev product before the patch commit bf325f6 (included in the 2026-06 release). The vulnerability applies to all users of the product who authenticate but do not hold admin privileges. Versions after the commit have the missing authorization guard added and are not affected.

With a CVSS score of 8.7 the flaw is considered high vulnerability. The attack requires only an authenticated non‑admin account and access to the server’s endpoint routes; it does not rely on external network exploitation. Since the EPSS score is not available, the likelihood of exploitation is unknown, but the lack of admin checks makes it easy to create a path for data leakage or denial of service. The vulnerability is not listed in the CISA KEV catalog, so no active exploit reports are currently known. Nonetheless, due to the ease of exploitation, prompt remediation is advised.