CVE-2026-125397 NocoBase plugin-ai 2.1.0 through 2.2.41 Authorization Bypass via Sub-Agent Username Override

High 7.1 Published 9 Nov 2026 Updated 9 Nov 2026

Exploited in the wild: Not known
Fix: None listed

What is CVE-2026-125397?

CVE-2026-125397 is a high-severity vulnerability in nocobase, published on 9 Nov 2026.

Official description

NocoBase plugin-ai 2.1.0 through 2.2.41 contains an authorization bypass vulnerability in getAccessibleAIEmployee() that lets authenticated users access unassigned AI employees by overriding the role-derived filter with a supplied username. Attackers can use the dispatch-sub-agent-task tool to run ungranted AI employees with their tools and permissions, and get-ai-employee to read their prompts and tool configuration.

Weakness: CWE-863

Which versions are affected by CVE-2026-125397?

How do I fix CVE-2026-125397?

No fix has been published for CVE-2026-125397 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-125397 being exploited?

There is no known exploitation of CVE-2026-125397 in the wild and no public exploit code.

Sources

Also known as GHSA-4g9p-3cc5-xh4q.