Cyber Posture

CVE-2024-7767

HighPublic PoC

Published: 20 March 2025

Published
20 March 2025
Modified
15 October 2025
KEV Added
Patch
CVSS Score 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS Score 0.0028 51.6th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may destroy data and files on specific systems or in large numbers on a network to interrupt availability to systems, services, and network resources.

Security Summary

CVE-2024-7767 is an improper access control vulnerability (CWE-862) in danswer-ai/danswer version v0.3.94. It enables the first user created in the system to view, modify, and delete chats created by an Admin, potentially exposing sensitive information, compromising data integrity, and causing compliance issues. The vulnerability carries a CVSS v3.1 base score of 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N), indicating high severity due to network accessibility, low attack complexity, and requirements for only low privileges.

An attacker with low-privileged access as the first user registered in the system can exploit this over the network without user interaction. Successful exploitation grants unauthorized viewing, modification, or deletion of Admin-created chats, leading to high-impact confidentiality breaches (e.g., access to sensitive data) and integrity violations (e.g., tampering with chat history), though availability remains unaffected.

Mitigation details are available in advisories published via Huntr, including at https://huntr.com/bounties/1425dada-72d8-4bd9-a3e7-2863bb3e1a6c. Security practitioners should review these for patch information or workarounds specific to danswer-ai/danswer v0.3.94 and upgrade promptly.

This issue affects an open-source AI-powered search and answering platform, highlighting access control risks in AI/ML deployments where user-generated chats may contain proprietary or sensitive data. No public evidence of real-world exploitation is noted as of the CVE publication on 2025-03-20.

Details

CWE(s)
CWE-862

Affected Products

onyx
onyx
0.3.94

AI Security Analysis

AI Category
Enterprise AI Assistants
Risk Domain
Privacy and Disclosure
OWASP Top 10 for LLMs 2025
None mapped
MITRE ATLAS Techniques
None mapped
Classification Reason
Danswer (danswer-ai/danswer) is an open-source enterprise AI assistant for search and chat over knowledge bases, directly matching the 'Enterprise AI Assistants' category. The vulnerability involves improper access control to chats in this AI system.

MITRE ATT&CK Enterprise Techniques

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
T1565.001 Stored Data Manipulation Impact
Adversaries may insert, delete, or manipulate data at rest in order to influence external outcomes or hide activity, thus threatening the integrity of the data.
T1485 Data Destruction Impact
Adversaries may destroy data and files on specific systems or in large numbers on a network to interrupt availability to systems, services, and network resources.
Why these techniques?

The improper access control flaw enables low-privileged (first) users to exploit the vulnerability for privilege escalation to manipulate admin chats (T1068), modify stored chat data (T1565.001), and delete chats causing data destruction (T1485).

References