Is CVE-2026-82284 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82284?

CVE-2026-82284 has a CVSS v3 severity of HIGH (8.1).

Back

CVE-2026-82284

Description

Quivr versions through 0.0.322 fail to validate chat ownership in the GET /chat/{chat_id}/history, DELETE /chat/{chat_id}, and POST /chat/{chat_id}/question/answer endpoints. Authenticated attackers can read other users' conversation histories including private knowledge base content, delete arbitrary chats, and inject fabricated messages into other users' conversations.