Executive brief
Chatbot UI is an AI chat application that allows users to upload and manage private files. The application contains an authorization vulnerability in its file retrieval feature that allows authenticated users to access private files belonging to other users by guessing file identifiers. This enables attackers to extract sensitive document content that should only be accessible to the original file owner.
Technical details
The vulnerability is an authorization bypass in the /api/retrieval/retrieve endpoint caused by improper access control enforcement. The endpoint uses a Supabase service-role client that bypasses row-level security checks and fails to validate file ownership before returning indexed content chunks. An authenticated attacker can craft POST requests with arbitrary file UUIDs to retrieve content from files they do not own. The vulnerable code does not verify that the requesting user has permission to access the specified files before querying their content through Supabase RPC calls.
Affected products
- McKay Wrigley Chatbot UI prior to fix
Timeline
- 2026-09-04: disclosed