Executive brief
Quivr is an open-source RAG (Retrieval-Augmented Generation) framework that integrates large language models into applications. The vulnerability allows authenticated users to modify or overwrite any prompt in the system without permission checks, enabling attackers to hijack system prompts that affect all users of a shared brain/workspace, leading to potential data manipulation or service disruption.
Technical details
The vulnerability is an authorization bypass (insecure direct object reference / IDOR) in Quivr's prompt management endpoints. The PUT /prompts/{prompt_id} and GET /prompts/{prompt_id} endpoints fail to verify that the authenticated user owns or has permission to access the prompt before returning or modifying it. An attacker with valid credentials—even read-only access to a shared brain—can enumerate prompt identifiers and directly modify any prompt via the unprotected update endpoint. The vulnerability affects versions through 0.0.322 and requires network access to the Quivr API and valid authentication credentials.
Affected products
- The Vibe Company Quivr through 0.0.322
Timeline
- 2026-08-28: disclosed