What happened
CordysCRM's server-sent-events layer, used to push real-time updates including AI/agent-driven CRM workflow notifications, was left completely unauthenticated, letting any network attacker interact with the notification stream of any user.
Why it matters
CordysCRM markets itself as an AI-powered CRM; an unauthenticated attacker able to hijack the SSE notification channel can disrupt or spoof AI-agent-driven CRM workflows and potentially pivot into the broader authenticated application surface via session/notification manipulation.
Attack vector
The SseController exposes /sse/subscribe, /sse/broadcast, and /sse/close as anonymous (unauthenticated) endpoints because ShiroFilter's public-path configuration permits SSE paths without any authorization check, allowing a remote unauthenticated attacker to subscribe to, broadcast to, or terminate other users' real-time notification streams.
Affected systems
CordysCRM < 1.7.2
Mitigation
Upgrade to CordysCRM 1.7.2 or later.