A critical authorization bypass vulnerability in VoltAgent allows authenticated users to access and manipulate the private conversations of other users.

The application fails to validate conversation ownership within its memory API handlers (specifically in server-core/src/handlers/memory.handlers.ts). By supplying caller-controlled identifiers to these endpoints, an authenticated user can perform unauthorized operations on data belonging to other accounts.

This vulnerability poses a significant risk to data confidentiality and integrity, as unauthorized actors can read sensitive communication history or manipulate internal application state. The CVSS score of 8.1 reflects the high severity of this flaw, given that it allows for complete unauthorized access to protected conversation data. Such an exposure could lead to severe privacy violations, loss of user trust, and potential regulatory non-compliance.

Immediate Action: Since a specific patch version is currently unknown, administrators should monitor the official VoltAgent repository for security updates and apply them immediately upon release.

Proactive Monitoring: Review web server and application logs for anomalous patterns, specifically looking for repeated API requests to memory-related endpoints that involve unexpected conversationId or userId parameters.

Compensating Controls: Implement strict access control lists at the Web Application Firewall (WAF) level to block suspicious API calls that attempt to traverse or access resource identifiers outside of the authenticated user's scope.

Public Exploit Available: Unknown.

Given the ability for an authenticated user to perform unauthorized actions on arbitrary data, this vulnerability must be treated with high priority. Organizations using VoltAgent should restrict access to the application from untrusted networks until a vendor-supplied patch is deployed. Verify that all users are operating under the principle of least privilege, and prepare to update the software as soon as the fix becomes available.