What happened
Two VulnCheck-verified CVEs published 2026-10-13 (CVE-2026-110207 CVSS 8.8 CWE-862 missing auth on user/role/dept/agent admin APIs; CVE-2026-110208 CVSS 7.1 CWE-862 cleartext AI provider key read + exfiltration via ai/test). Any authenticated user achieves full administrator account takeover and holds the organisation's LLM API credentials. Verified via NVD REST API.
Why it matters
AI CRMs hold both the business data and the live AI-provider API keys that bill to the organisation. The missing-auth chain converts the lowest-privileged login into admin takeover plus direct theft of the AI provider credentials — exactly the key material targets of the ongoing AI-supply-chain campaigns.
Attack vector
POST /managerUser/updateUser to reset the admin account's password and self-assign the 'all' role (no admin check); GET /systemConfig/byType/ai leaks the cleartext AI provider API key, and /systemConfig/ai/test can forward the stored key to an attacker-chosen apiUrl. No authz check separates the two primitives.
Affected systems
WuKongOpenSource Wukong AICRM through 20260610
Mitigation
No fixed release in the window; see VulnCheck advisories and the two separate CVEs (CVE-2026-110207 admin-API missing auth; CVE-2026-110208 AI-key disclosure). Restrict network exposure, enforce role checks, rotate all AI provider keys.