CVE-2026-85669

CVE-2026-85669 is a missing-authorization flaw (CWE-862) in the potpie application through version 2.0.0: the POST /conversations/{conversation_id}/code-changes/sync endpoint does not verify that the authenticated caller owns the conversation referenced in the URL. Any authenticated user can exploit it simply by submitting a sync request that uses another user's conversation ID. The attacker gains unauthorized write access, letting them inject or modify arbitrary file changes (pending changes) inside other users' conversations; per the CVSS 4.0 vector the impact is integrity-only (VI:H), with no confidentiality or availability loss. Any deployment of potpie 2.0.0 or earlier with multiple users is affected, especially where conversation IDs are predictable or shared. As of this analysis there is no known exploitation, no public proof-of-concept, and the issue is not in CISA KEV, with EPSS estimating only a 0.2% chance of exploitation in the next 30 days.

What to do: Upgrade potpie to the first release after 2.0.0 that includes the fix (no patched version number is given in the data, so confirm with the vendor/project repository). As interim mitigation, restrict access to the sync endpoint, avoid exposing or enumerating conversation IDs, and audit conversations for unexpected pending changes. Check access logs for sync requests referencing conversation IDs owned by other users, which would indicate exploitation attempts.