PT-2026-55707 · Forceinjection · Ai-Fundermentals
CVSS v3.1
3.1
Low
| Vector | AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
ForceInjection AI-fundermentals versions 2.0 through 3.0
Description
The Memory Recall Handler component contains an issue within the
get conversation history() function located in the 08 agentic system/memory/langchain/code/smart customer service.py file. This flaw allows for the use of a weak hash, which can be exploited remotely. Successful exploitation requires a high degree of complexity and is considered difficult.Recommendations
Install the patch identified as f57277fdd9ba373ace72d83c272023ec67f720d6 for versions 2.0 through 3.0.
As a temporary mitigation, restrict access to the
get conversation history() function.Exploit
Fix
Use of a Broken Cryptographic Algorithm
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ai-Fundermentals