Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Aegra is a drop-in replacement for LangSmith Deployments. Prior to 0.9.7, with multiple authenticated users on a shared instance are vulnerable to a cross-tenant IDOR. Any authenticated attacker, given another user's thread_id, can execute graph runs against the user's thread, read the user's full checkpoint state, and inject arbitrary messages into the user's conversation history. This vulnerability is fixed in 0.9.7.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-44504 Cross-Tenant IDOR in Aegra Prior to Version 0.9.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44504
Post summary
The text announces CVE-2026-44504, a cross‑tenant IDOR flaw in Aegra before v0.9.7, with no PoC, exploit code, or patch provided.