CVE-2026-50561

{
  "id": "CVE-2026-50561",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-12T15:17:38.307",
  "lastModified": "2026-10-24T16:10:00.153",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2, the project's authentication mechanism contains a flaw. In affected versions, the system does not sufficiently validate the identity token in the Authorization header — only performing a validity check. This allows an administrator token generated in another deployment instance or local testing environment to be used to access the backend management interfaces of a different affected instance. An attacker who obtains or constructs an acceptable administrator Authorization token may bypass normal login authentication and gain administrator privileges. This vulnerability could allow an attacker to access system configurations, invoke backend management APIs, create administrator accounts, and ultimately take over the system backend. This issue has been fixed in version 0.6.2. Before upgrading, users are advised to implement the following temporary measures: Set the environment variable `JWT_SECRET_KEY` to a non-default value, and configure a unique, sufficiently strong JWT/authentication key for each deployment instance; and/or avoid exposing backend management interfaces directly to the public network."
    },
    {
      "lang": "es",
      "value": "Yuxi es una plataforma de desarrollo de agentes de grafo de conocimiento y base de conocimiento inteligente basada en modelos gryes. Antes de la versión 0.6.2, el mecanismo de autenticación del proyecto contiene una falla. En las versiones afectadas, el sistema no valida suficientemente el token de identidad en el encabezado Authorization - solo realiza una verificación de validez. Esto permite que un token de administrador generado en otra instancia de despliegue o entorno de prueba local sea utilizado para acceder a las interfaces de gestión de backend de una instancia afectada diferente. Un atacante que obtiene o construye un token de Authorization de administrador aceptable puede eludir la autenticación de inicio de sesión normal y obtener privilegios de administrador. Esta vulnerabilidad podría permitir a un atacante acceder a configuraciones del sistema, invocar APIs de gestión de backend, crear cuentas de administrador y, en última instancia, tomar el control del backend del sistema. Este problema ha sido solucionado en la versión 0.6.2. Antes de actualizar, se aconseja a los usuarios implementar las siguientes medidas temporales: Establecer la variable de entorno “JWT_SECRET_KEY” a un valor no predeterminado, y configurar una clave JWT/autenticación única y suficientemente fuerte para cada instancia de despliegue; y/o evitar exponer las interfaces de gestión de backend directamente a la red pública."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "xerrors",
          "product": "Yuxi",
          "versions": [
            {
              "version": "< 0.6.2",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
          "baseScore": 9.4,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.5
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-13T16:19:10.933903Z",
          "id": "CVE-2026-50561",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/xerrors/Yuxi/commit/1e8b20e30b1258d1cd3ebf3af5c6212da4b84b48",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/xerrors/Yuxi/issues/673",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/xerrors/Yuxi/security/advisories/GHSA-6959-99pq-c56x",
      "source": "[email protected]"
    }
  ]
}