PT-2026-38409 · Aegra · Aegra

Jojothebizarre · Published 2026-05-07 · Updated 2026-05-14 · CVE-2026-44504

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Aegra versions 0.9.0 through 0.9.6

Description Shared instances with multiple authenticated users are susceptible to a cross-tenant Insecure Direct Object Reference (IDOR). An authenticated attacker who obtains another user's thread id can execute graph runs, read the full checkpoint state via the output field, and inject arbitrary messages into the victim's conversation history. The vulnerability exists because run-creation endpoints lacked a user id filter at the SQL layer, and the authorization model defaults to allowing requests when no custom handler is registered. This affects the following endpoints:

• '/threads/{thread id}/runs'
• '/threads/{thread id}/runs/stream'
• '/threads/{thread id}/runs/wait'

Recommendations Update to version 0.9.7. As a temporary workaround, register an @auth.on("threads", "create run") handler to explicitly verify that the thread ownership matches the authenticated identity before allowing the operation.

Fix

IDOR

Improper Authorization

Weakness Enumeration

CWE-639

CWE-285

Related Identifiers

CVE-2026-44504

GHSA-M98R-6667-4WQ7

Affected Products

Aegra

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-44504 · Security Note
• https://osv.dev/vulnerability/GHSA-m98r-6667-4wq7 · Vendor Advisory
• https://github.com/aegra/aegra/issues/336 · Note
• https://github.com/aegra/aegra · Note
• https://github.com/aegra/aegra/security/advisories/GHSA-m98r-6667-4wq7 · Note
• https://github.com/aegra/aegra/commit/e1b2042254fd49072ca281bc35b3f2a3bed74b31 · Note
• https://github.com/aegra/aegra/pull/337 · Note
• https://github.com/aegra/aegra/releases/tag/v0.9.7 · Note
• https://t.me/CVEtracker/53800 · Telegram Post