Authorization bypass through user-controlled key in Tolgee - #VU133246

Vulnerability details

The vulnerability allows a remote user to modify another organization's LLM provider configuration and redirect future LLM traffic.

The vulnerability exists due to authorization bypass through user-controlled key in the LLM provider update endpoint when handling update requests with a foreign provider identifier under an authorized organization URL. A remote user can send a specially crafted request to modify another organization's LLM provider configuration and redirect future LLM traffic.

Affected software

Remediation

External References

• https://github.com/tolgee/tolgee-platform/security/advisories/GHSA-535f-x3hw-p4p8

Related Security Bulletins

• Multiple vulnerabilities in Tolgee