CVE-2026-44504CWE-285CWE-639

Aegra: Cross-user run injection in /threads/{thread_id}/runs (IDOR)

High · published May 14, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

Aegra is a drop-in replacement for LangSmith Deployments. Prior to 0.9.7, with multiple authenticated users on a shared instance are vulnerable to a cross-tenant IDOR. Any authenticated attacker, given another user's thread_id, can execute graph runs against the user's thread, read the user's full checkpoint state, and inject arbitrary messages into the user's conversation history. This vulnerability is fixed in 0.9.7.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00351 · 27.5th percentile
Weaknesses
CWE-285 · Improper Authorization; CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-05-14T15:52Z
EPSS history
Timeline
  • 14 MAY 15:52Z
    Aegra: Cross-user run injection in /threads/{thread_id}/runs (IDOR)
    cvelistv5