Executive brief
Stigmem-node is a platform for managing and sharing data 'facts' between different organizations or 'tenants.' In multi-tenant configurations, a flaw allowed an administrator of one organization to view, approve, or reject data belonging to other organizations on the same server. This could lead to unauthorized access to sensitive information and the ability to manipulate data integrity across different customer accounts.
Technical details
A Broken Object Level Authorization (BOLA) vulnerability exists in the quarantine review interface of stigmem-node when using the 'stigmem-plugin-multi-tenant' plugin. The root cause is a lack of tenant-id filtering in the SQL queries within 'routes/quarantine.py', specifically in the list/count functions and the '_get_quarantined_fact' helper. An attacker with tenant-level 'write' privileges can bypass intended isolation to list, read, admit, or reject quarantined facts belonging to any other tenant on the same node. The vulnerability was addressed in version 0.9.0a12 by enforcing 'f.tenant_id = identity.tenant_id' predicates and scoping garden lookups to the caller's tenant.
Affected products
- eidetic-labs stigmem-node < 0.9.0a12
Timeline
- 2026-06-13: patched: Fix merged in PR #728
- 2026-06-19: advisory: GitHub Advisory GHSA-xhv3-q4xx-349r published