Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

VU#166125: Bisheng has authentication bypass vulnerabilities

CERT/CC Vulnerability Notes ()3 min read5 · 1 read
Read at kb.cert.org
AI summary · grok-4.7-buildSummaries by Vani AI

CERT/CC warns Bisheng has an unpatched SSO authentication bypass that can grant super-admin access.

CERT/CC published VU#166125 covering three vulnerabilities in Bisheng, DataElement's open-source LLM application platform. CVE-2026-96679 lets unauthenticated attackers submit arbitrary usernames to a legacy SSO endpoint, receive a JWT, and potentially gain super-administrator access; the vendor has not patched it. CVE-2026-96681 is an IDOR that exposes other users' workflow configurations and is fixed in 3.0.0. CVE-2026-100156, fixed in 2.5.0, lets authenticated users abuse another user's assistant, run inferences billed to that user's provider, and leak configured tools and workflows.

Key facts
  • CVE-2026-96679 lets unauthenticated callers obtain JWTs via a legacy SSO endpoint and may create super-admins.
  • CVE-2026-96681 is an IDOR exposing other users' workflow DSL, fixed in version 3.0.0.
  • CVE-2026-100156 allows cross-user LLM credential and workflow abuse, fixed in 2.5.0.
  • The SSO flaw remains unpatched; CERT/CC recommends disabling the endpoint and avoiding BISHENGPRO.
Analyze CVE-2026-96679 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-96679CVE-2026-96681CVE-2026-100156
Tags
bishengauthentication-bypassidorllmcertdataelementjwt
Vendors
DataElement
Products
Bisheng
Organizations
CERT/CCVoke CyberDataElement

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-100156
———
CVE-2026-96679
———
CVE-2026-96681
———

From the original article

3 min read at kb.cert.org

Overview Bisheng contains three vulnerabilities: a pre-authentication account takeover mechanism via a legacy single sign-on (SSO) endpoint; an Insecure Direct Object Reference (IDOR) vulnerability that exposes cross-user workflow data; and prior to version 2. 5. 0, authenticated attackers could perform cross-user LLM credential abuse and data disclosure due to missing service-layer access checks.

CERT/CC Vulnerability Notes

kb.cert.org

Read the full article at CERT/CC Vulnerability Notes

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.