CVE-2026-82271: R2R Missing Ownership Check Allows Modifying Other Users' Conversations

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-28 · updated 2026-09-23
Weakness: CWE-639

Description

R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users' conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users' conversation histories, corrupting state and injecting malicious content.

Affected products

SciPhi-AI R2R: through 3.6.5

References

https://github.com/SciPhi-AI/R2R
https://github.com/SciPhi-AI/R2R/blob/9c5a94d151f90876bd7eb860f300a8fd662dc481/py/core/main/api/v3/conversations_router.py
https://github.com/SciPhi-AI/R2R/issues/2292
https://www.vulncheck.com/advisories/r2r-missing-ownership-check-allows-modifying-other-users-conversations
https://github.com/SciPhi-AI/R2R/issues/2292

Get alerted when CVE-2026-82271 or the next vulnerability affects your stack