What happened
Missing CSRF tokens on the AI Assistant's tool-execution action allow forged requests to trigger tool actions as the victim administrator. CVSS 6.8 (Medium).
Why it matters
Highlights that AI 'agentic' tool-execution endpoints bolted onto existing web apps need the same CSRF hardening as any other state-changing admin action — an attacker can trigger AI-assistant tool actions with admin privileges via a simple forged request.
Attack vector
The execute_tool action in admin/ai.php lacks CSRF protection, letting a remote unauthenticated attacker forge a cross-site request from an attacker-controlled page that a recently logged-in administrator's browser will execute against the AI Assistant's tool-execution endpoint.
Affected systems
Emlog ≤ 2.6.26
Mitigation
Upgrade Emlog to the version fixed in GHSA-v6wr-4x55-7qp5.