SecBoard
Zurück zur CVE-Übersicht

CVE-2026-57476

MEDIUM(4.8)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Risk Signal Score22/100 — NIEDRIG
  • CVSS 4.8 — Mittel
  • Weniger als 24 Stunden alt

Beschreibung

Deloitte AI Assist for Customer exposed unauthenticated API endpoints that allowed an attacker with knowledge of additional parameters to read from or inject content into the retrieval-augmented generation (RAG) corpus. On 2026-03-25, AI Assist for Customer restricted network access and enforced authentication for the previously exposed endpoints.

Referenzen