# Lunary-ai Lunary access control bypass in prompt variation management

Source: https://junglewise.ai/threats/lunary-ai-lunary-access-control-bypass-in-prompt-variation-management-cd347a2d  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2024-06-10. Updated: 2026-05-14  
License: CC BY 4.0 with a link back

Severity: low · CVSS 3.1 · Published 2024-06-10

Lunary, an observability platform for AI applications, contains a security flaw in how it manages AI prompt variations. This vulnerability allows a user from one organization to view, modify, or delete prompt data belonging to a completely different organization. This could lead to the theft of proprietary AI prompts or the disruption of AI experiments and production workflows.

Technologies: [lunary (npm)](https://junglewise.ai/threats/technologies/lunary). Vendors: [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** Low severity, with a CVSS score of 3.1, published 10 June 2024.

**Which products and versions are affected?** lunary (npm) SEMVER:introduced=0,fixed=1.4.9.

**Is there a fix for This vulnerability?** Yes. lunary (npm): upgrade to 1.4.9 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is This vulnerability attacked?** It is attacked over the network, in a web application.

**Am I affected?** Check whether you run lunary (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- lunary (npm): upgrade to 1.4.9 or later

  ```sh
  npm install lunary@1.4.9
  ```


## Technical details

An Insecure Direct Object Reference (IDOR) or insufficient granularity of access control exists in Lunary version 1.2.13 and prior. The application fails to validate that the dataset prompts and variations being accessed or modified belong to the requesting user's organization or project. An authenticated attacker can exploit this by sending crafted network requests to create, update, or delete prompt variations for datasets they do not own. This can result in unauthorized data access and loss of data integrity for AI training and testing datasets. The issue was addressed in version 1.4.9.

## Affected products

- lunary-ai lunary up to 1.4.8

## Timeline

- 2024-06-09: disclosed
- 2024-06-10: advisory
- 2024-06-10: patched: Fixed in version 1.4.9

## References

- [https://github.com/lunary-ai/lunary/commit/35dd4af0001a54ccb14276a1546eb977f82c0c5e](https://github.com/lunary-ai/lunary/commit/35dd4af0001a54ccb14276a1546eb977f82c0c5e)
- [https://github.com/lunary-ai/lunary](https://github.com/lunary-ai/lunary)
- [https://huntr.com/bounties/3ca5309f-5615-4d5b-8043-968af220d7a2](https://huntr.com/bounties/3ca5309f-5615-4d5b-8043-968af220d7a2)

## Related threats

- [Lunary improper access control in invite user functionality](https://junglewise.ai/threats/cve-2024-6087-lunary-improper-access-control-in-invite-user-functionality)
- [Lunary information disclosure in runs endpoint](https://junglewise.ai/threats/cve-2024-6867-lunary-information-disclosure-in-runs-endpoint)
- [Lunary Cross-Site Request Forgery in CORS](https://junglewise.ai/threats/cve-2024-6862-lunary-cross-site-request-forgery-in-cors)
- [Lunary improper authentication in SAML configuration](https://junglewise.ai/threats/cve-2024-6582-lunary-improper-authentication-in-saml-configuration)
- [lunary-ai lunary authorization bypass in project access](https://junglewise.ai/threats/cve-2024-4146-lunary-ai-lunary-authorization-bypass-in-project-access)