PT-2026-55707 · Forceinjection · Ai-Fundermentals

Dem00000 · Published 2026-07-04 · Updated 2026-07-04 · CVE-2026-14630

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ForceInjection AI-fundermentals versions 2.0 through 3.0

Description The Memory Recall Handler component contains an issue where the get conversation history() function in the 08 agentic system/memory/langchain/code/smart customer service.py file uses a weak hash. This allows for remote exploitation, although the attack requires a high degree of complexity and is considered difficult to execute.

Recommendations Install the patch f57277fdd9ba373ace72d83c272023ec67f720d6 for versions 2.0 through 3.0. As a temporary mitigation, restrict access to the get conversation history() function.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-328

CWE-327

Related Identifiers

CVE-2026-14630

Affected Products

Ai-Fundermentals

References · 10

• 🔥 https://github.com/ForceInjection/AI-fundamentals/issues/17 · Exploit
• https://github.com/ForceInjection/AI-fundamentals/commit/f57277fdd9ba373ace72d83c272023ec67f720d6 · Patch
• https://github.com/ForceInjection/AI-fundamentals/pull/18 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-14630 · Security Note
• https://twitter.com/infoflowcloud/status/2073448167849242989 · Twitter Post
• https://twitter.com/CVEnew/status/2073447436073210303 · Twitter Post
• https://vuldb.com/cve/CVE-2026-14630 · Note
• https://vuldb.com/vuln/376146 · Note
• https://vuldb.com/vuln/376146/cti · Note
• https://vuldb.com/submit/845672 · Note