CVE-2026-55583

Name of the Vulnerable Software and Affected Versions Twenty versions prior to 2.9.0

Description An insecure direct object reference (IDOR) exists in the AI agent monitor's AgentTurnResolver and the agent-turn-grader.service.ts file. The agentTurns(agentId) query and the evaluateAgentTurn(turnId) mutation fail to validate if the requested object belongs to the caller's workspace, as the workspaceId column is omitted from the WHERE clause. Consequently, an authenticated user with the AI settings flag can access another workspace's full chat history, including raw chat text, tool calls, and tool outputs, or insert an evaluation row that sends the victim's turn to the default LLM. This is possible if the attacker obtains the agentId or turnId variables, which are exposed in the settings page URL.

Recommendations Update to version 2.9.0.