CVE-2026-57476

Name of the Vulnerable Software and Affected Versions Deloitte AI Assist for Customer (affected versions not specified)

Description Unauthenticated API endpoints were exposed, allowing an attacker with knowledge of additional parameters to read from or inject content into the retrieval-augmented generation (RAG) corpus. RAG is a technique used to optimize the output of a large language model by referencing an authoritative knowledge base outside of its training data.

Recommendations Restrict network access and enforce authentication for the exposed API endpoints.