Incorrect authorization in Directus - #VU158874
Published: November 3, 2026
Vulnerability identifier: #VU158874
CSH Severity: Low
CVSS v4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-863
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to access information through AI tools intended only for administrators, without gaining permissions beyond those already assigned to the user.
The vulnerability exists due to incorrect authorization in the AI Chat endpoint (POST /ai/chat) when handling requests for admin-only AI tools. A remote user can use an account with app access to request the flows and operations tools and read information permitted by the account's existing policies through an interface reserved for administrators.
Exploitation requires an AI provider to be configured on the instance.
Affected software
Directus
Remediation
Install security update from vendor's website.
Directus - update to 12.3.0