Executive brief
SimStudioAI Sim is a platform used to build and manage AI agents. A security flaw in how the system handles password-protected deployments allows unauthorized users to bypass security checks and access private AI chat or form interfaces. By guessing a short, weak piece of security data, an attacker can create their own access tokens to view sensitive deployment configurations and interact with protected agents.
Technical details
A vulnerability exists in the Password Protection Handler within `apps/sim/lib/core/security/deployment.ts` of SimStudioAI sim. The `validateAuthToken` function relies on a base64-encoded token containing a 32-bit truncated SHA-256 hash of the deployment password. Because these tokens are not signed with a server-side secret (HMAC), an attacker can forge valid authentication cookies by brute-forcing the 8-character hex hash (32-bit search space). Successful exploitation allows unauthorized remote access to password-protected chat and form deployments, including the ability to retrieve full deployment configurations via GET requests. A pull request (#4760) has been submitted to implement HMAC-signed tokens.
Affected products
- SimStudioAI sim up to 0.6.92
Timeline
- 2026-05-27: disclosed: Issue reported on GitHub and fix proposed via pull request
- 2026-06-28: advisory: CVE-2026-13510 published