{"id":"CVE-2026-111668","summary":"AIHelms through 0.1.25 Missing Authorization in Efficiency Analytics API","details":"AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authenticated low-privileged users to bypass efficiency:read and efficiency:write permission checks. Attackers can query routes like /cost/detail, /top-users and /budget to read organization-wide AI spend, and can modify suggestion statuses or generate reports.","modified":"2026-10-21T02:55:49.083965083Z","published":"2026-10-16T17:39:30.328Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111668.json","cna_assigner":"VulnCheck","cwe_ids":["CWE-862"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111668.json"},{"type":"PACKAGE","url":"https://github.com/beizhu-1209/AIHelms"},{"type":"ARTICLE","url":"https://github.com/beizhu-1209/AIHelms/blob/0.1.25/apps/api/v1/efficiency.py#L284-L307"},{"type":"ARTICLE","url":"https://github.com/beizhu-1209/AIHelms/blob/0.1.25/apps/api/v1/efficiency.py#L436-L447"},{"type":"ADVISORY","url":"https://hackmd.io/@hieuPenguinnn/aihelms-efficiency-analytics-missing-authorization"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111668"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/aihelms-through-0.1.25-missing-authorization-in-efficiency-analytics-api"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/beizhu-1209/aihelms","events":[{"introduced":"0"},{"last_affected":"6b2efa91427c490212ec2ede0f156e139a503bed"}],"database_specific":{"extracted_events":[{"source":"AFFECTED_FIELD","strategy":"StandardRange","range":[{"introduced":"0"},{"last_affected":"0.1.25"}]}]}}],"versions":["0.1.25","0.1.24","0.1.22","0.1.21","0.1.20","0.1.19","0.1.18","0.1.16","0.1.15","0.1.14","0.1.13","0.1.12","0.1.11","0.1.9","0.1.8","0.1.7","0.1.6","0.1.5","stable"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111668.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"}]}