What happened
Verified via NVD REST API (published 2026-10-14, CVSS 5.9 v3.1 / 6.0 v4.0). The AiBot2 chat manager never validates that the chat belongs to the caller.
Why it matters
AI chat/assistant transcripts increasingly contain sensitive business data; a cross-user chat-ID IDOR in a CRM's AI assistant leaks conversation content to any authenticated user and lets them destroy or interrupt sessions.
Attack vector
Authenticated IDOR (CWE-639): chat-init/chat-delete/chat-feedback/chat-stream-stop accept an arbitrary chatid with no ownership check, exposing AI chat histories across users.
Affected systems
getrebuild/rebuild through 4.5.0
Mitigation
Add ownership checks on all /aibot2 chat endpoints (fixed release pending); restrict access to the AI assistant module meanwhile.