CVE-2026-121558 | Ricky-7-Yan intelligent-audit-system Metadata Authorization rag/agentic_rag.py _metadata_allowed project_id authorization

A vulnerability was found in Ricky-7-Yan intelligent-audit-system and classified as problematic. The affected element is the function _metadata_allowed of the file rag/agentic_rag.py of the component Metadata Authorization. The manipulation of the argument project_id results in authorization bypass.

This vulnerability is reported as CVE-2026-121558. The attack can be launched remotely. No exploit exists.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More