Executive brief
Deloitte AI Assist for Customer, an enterprise AI platform used for customer service automation, contained a security flaw where certain internal interfaces were accessible over the internet without a password. This allowed unauthorized individuals to potentially read sensitive training data or inject malicious content into the AI's knowledge base, which could lead to the AI providing incorrect or harmful information to users. The issue has been addressed by the vendor through the enforcement of strict authentication and network access controls.
Technical details
Deloitte AI Assist for Customer (part of the Ascend platform) suffered from a missing authentication vulnerability (CWE-306) in its backend API endpoints, specifically those associated with the retrieval-augmented generation (RAG) service. The vulnerability allowed unauthenticated remote attackers to interact with the RAG corpus via the public internet if they could determine specific API parameters. This interaction included both read access to the document corpus and write access, enabling content poisoning of the AI's knowledge base. The issue was mitigated on 2026-03-25 by enforcing authentication at the Azure API Management (APIM) gateway and restricting network access to the backend service mesh.
Affected products
- Deloitte AI Assist for Customer (Ascend Platform) All versions prior to 2026-03-25
Timeline
- 2026-03-13: other: Initial discovery by researchers (Day 0)
- 2026-03-25: patched: Authentication enforced and network access restricted
- 2026-05-18: disclosed: Initial researcher advisory published
- 2026-07-10: advisory: CVE published to NVD