Auth bypass in Sciphi-Ai R2r
CVE-2026-82271
R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users' conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users' conversation histories, corrupting state and injecting malicious content.
Vulnerability class: IDOR (Insecure Direct Object Reference)
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.
Affected products
Weakness classification (CWE)
References
- disclosure@vulncheck.com (issue-tracking)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (technical-description)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2026-82271?
- CVE-2026-82271 is a medium-severity vulnerability in Sciphi-Ai R2r, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 6.5/10. Published 2026-08-28.
- How severe is CVE-2026-82271?
- Medium severity. CVSS v3 base score is 6.5 out of 10.