Read the docs

QuivrHQ

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

QuivrHQ records in CISA KEV

No QuivrHQ vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-56749 CVE-2026-82284 · GHSA-3j2c-qqcf-39m8

Quivr Chat Endpoints Missing Ownership Validation

Priority HIGH 72

Quivr versions through 0.0.322 fail to validate chat ownership in the GET /chat/{chat_id}/history, DELETE /chat/{chat_id}, and POST /chat/{chat_id}/question/answer endpoints.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00426 Published 2026-08-28 No fix listed CWE-639
TI-2026-56745 CVE-2026-82280 · GHSA-2mxf-m4gh-hj3g

Quivr Prompt Endpoints Missing Ownership Validation

Priority MEDIUM 64

Quivr through 0.0.322 fails to validate ownership in prompt endpoints, allowing authenticated users to modify any prompt by identifier.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00351 Published 2026-08-28 No fix listed CWE-639
Open these records in search →