Executive brief
potpie is an AI-native software development platform that manages code conversations and collaborative workflows. The platform fails to properly verify user ownership when processing requests to synchronize code changes, allowing authenticated users to modify pending code changes in other users' conversations without authorization. This could enable attackers to tamper with collaborative work or inject malicious changes into ongoing development tasks.
Technical details
The POST /conversations/{conversation_id}/code-changes/sync endpoint in potpie through version 2.0.0 lacks proper authorization checks, failing to verify that the authenticated user owns the target conversation before allowing code change modifications. An authenticated attacker can exploit this authorization bypass by supplying another user's conversation ID to write arbitrary file changes into their pending modifications. The vulnerability requires valid authentication but no additional user interaction; the attacker can directly manipulate other users' code changes. A patch addressing this authorization check is likely available in versions after 2.0.0.
Affected products
- potpie potpie through 2.0.0
Timeline
- 2026-09-04: disclosed