Executive brief
cc-connect is a bridge that connects local AI coding agents to messaging platforms like Feishu. The application fails to enforce user access controls when processing interactive card callbacks, allowing attackers in permitted chat groups to execute agent commands that should be restricted. This bypasses security policies that protect other message handlers.
Technical details
The vulnerability is an authorization bypass (CWE-639) in the onCardAction handler for Feishu interactive cards. The Feishu platform handler fails to validate per-user allowlist filtering when processing card action callbacks, while the same filtering is correctly applied to text message handlers. An attacker with access to admitted chats can craft and trigger card actions to dispatch agent commands, circumventing access control policies. The vulnerability affects cc-connect through version 1.5.0. A patch is expected in a subsequent version.
Affected products
- cc-connect cc-connect through 1.5.0
Timeline
- 2026-09-16: disclosed