Is CVE-2026-82280 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82280?

CVE-2026-82280 has a CVSS v3 severity of HIGH (7.1).

Back

CVE-2026-82280

Description

Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier. Attackers with read-only access to shared brains can read exposed prompt identifiers and overwrite system prompts affecting all brain users.