{"affected":[{"defaultStatus":"unaffected","ecosystem":"github","packageName":"moyangzhan/langchain4j-aideepin","product":"langchain4j-aideepin","source":"CNA: VulnCheck","vendor":"moyangzhan","versions":[{"lessThan":"3.31.0","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-121938","cwes":["CWE-639"],"description":"langchain4j-aideepin before 3.31.0 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' character-chat conversations by supplying their character uuid. Attackers can request GET /character/{uuid}, which CharacterService.detail resolves without an ownership check, to obtain victims' questions, AI answers, and attachment and audio URLs.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0"},{"score":5.3,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793795477804,"publishedAt":1793795477804,"references":[{"source":"CNA: VulnCheck","tags":["issue-tracking"],"url":"https://github.com/moyangzhan/langchain4j-aideepin/issues/116"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://hackmd.io/@hieuPenguinnn/langchain4j-aideepin-character-conversation-cross-user-idor"},{"source":"CNA: VulnCheck","tags":["issue-tracking","patch"],"url":"https://github.com/moyangzhan/langchain4j-aideepin/pull/117"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/moyangzhan/langchain4j-aideepin/commit/9b2fee6b66836a0efd5599cfcddd05b80b05ca93"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/moyangzhan/langchain4j-aideepin/blob/v3.30.0/server/adi-common/src/main/java/com/moyz/adi/common/service/CharacterService.java#L105-L125"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/langchain4j-aideepin-before-3.31.0-idor-via-get-character-uuid"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/moyangzhan/langchain4j-aideepin/pull/117"},{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/moyangzhan/langchain4j-aideepin/commit/9b2fee6b66836a0efd5599cfcddd05b80b05ca93"}],"revision":"24f283848b4a8fa442bd60dc5d2486d2b29fbef2ebc09a433d2113ba579f16d5","sources":[{"modifiedAt":1793795477804,"name":"CNA: VulnCheck","retrievedAt":1793797800298,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121938"}],"ssvc":null,"status":"published","title":"langchain4j-aideepin before 3.31.0 IDOR via GET /character/{uuid}","updatedAt":1793797800298}