Junglewise Threat Intelligence

CVE-2026-14630: ForceInjection AI-fundermentals session isolation bypass in Memory Recall Handler

CVE-2026-14630 · Severity: low · CVSS 3.1 · Published 2026-07-04

Executive brief

A security flaw was identified in the ForceInjection AI-fundermentals library, which provides components for building AI-driven customer service agents. The software failed to properly isolate conversation histories between different users, potentially allowing one user to access or overwrite the chat memory of another if they know the victim's session ID. This could lead to the exposure of sensitive customer data or the corruption of AI responses for specific users.

Technical details

A vulnerability exists in the `get_conversation_history` function within `08_agentic_system/memory/langchain/code/smart_customer_service.py`. The root cause is application-level key confusion where the LangGraph `thread_id` was mapped solely to a user-supplied `session_id` without verifying session ownership or including user/tenant metadata in the key. A remote attacker with low privileges and knowledge of a target session ID can exploit this to read or write to another user's conversation state. The fix, introduced in commit f57277f, requires session ownership verification and incorporates verified user identity and security context into the `thread_id` generation.

Affected products

  • ForceInjection AI-fundermentals 2.0, 3.0

Timeline

  • 2026-06-02: patched: Fix merged in commit f57277fdd9ba373ace72d83c272023ec67f720d6
  • 2026-07-04: advisory: NVD publication date

References