VULNERABILITY INTELLIGENCE
CVE-2026-82283
CVSS score8.1 HIGH
EPSS probability0.43%
CISA KEVNot currently listed
Published2026-08-28
Last modified2026-09-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Description
VoltAgent through 2.1.20 fails to validate conversation ownership in memory API handlers, allowing authenticated users to access other users' conversations. Attackers can read, modify, and delete arbitrary conversations and messages by supplying caller-controlled identifiers to memory endpoints.
Weakness classification
- disclosure@vulncheck.com: CWE-639