CVE-2026-82283

VoltAgent through version 2.1.20 fails to validate conversation ownership in its memory API handlers, a broken object-level authorization flaw (CWE-639). An authenticated user can trigger the flaw by supplying caller-controlled conversation or message identifiers to memory endpoints, without any ownership check. This allows the attacker to read, modify, and delete arbitrary conversations and messages belonging to other users on the same deployment. Any deployment running VoltAgent 2.1.20 or earlier, where the memory API is reachable by multiple users, is affected. There is no known public proof-of-concept, the flaw is not in CISA KEV, and EPSS currently estimates only a 0.2% probability of exploitation within 30 days.

What to do: Upgrade to a VoltAgent release newer than 2.1.20 once a patched version is published, and monitor the vendor's advisory for the fixed version. Until then, restrict access to memory API endpoints, enforce conversation-ownership checks at the application layer (e.g., in middleware or API gateways), and review logs for authenticated users accessing conversations they do not own.