{"vulnerability": "ghsa-q3v2-xj35-9grx", "sightings": [{"uuid": "453a0cff-ea12-4a66-a1a6-504309162a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-q3v2-xj35-9grx", "type": "seen", "source": "https://gist.github.com/alon710/57f8fdc68fb17b420e33683532c115ad", "content": "# GHSA-Q3V2-XJ35-9GRX: GHSA-Q3V2-XJ35-9GRX: Unrestricted Configuration Resolution in Umbraco.AI Leads to Sensitive Information Exposure\n\n> **CVSS Score:** 4.9\n> **Published:** 2026-07-14\n> **Full Report:** https://cvereports.com/reports/GHSA-Q3V2-XJ35-9GRX\n\n## Summary\nAn information exposure vulnerability exists in Umbraco.AI package versions up to 1.13.0, where an authenticated backoffice user with elevated privileges can resolve and retrieve arbitrary configuration values from the global ASP.NET Core IConfiguration hierarchy.\n\n## TL;DR\nUmbraco.AI versions <= 1.13.0 allow administrators to extract sensitive application secrets (like database connection strings) by exploiting an unrestricted dynamic configuration resolver.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-200\n- **Attack Vector**: Network\n- **Privileges Required**: High\n- **CVSS v3.1 Score**: 4.9 (Medium)\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n- **Remediation Status**: Patches Released (1.14.0)\n\n## Affected Systems\n\n- Umbraco.AI Web Application Packages\n- Umbraco backoffice setups with LLM integrations enabled\n- **Umbraco.AI**: <= 1.13.0 (Fixed in: `1.14.0`)\n- **Umbraco.AI.Core**: <= 1.13.x (Fixed in: `1.14.0`)\n- **Umbraco.AI.Web**: <= 1.13.x (Fixed in: `1.14.0`)\n\n## Mitigation\n\n- Upgrade Umbraco.AI and all related provider packages to version 1.14.0 or above.\n- Relocate configuration secrets under the secure Umbraco:AI:Secrets and Umbraco:AI:Variables namespaces.\n- Avoid expanding AllowedConfigurationKeyPrefixes unless strictly necessary for legacy integration support.\n\n**Remediation Steps:**\n1. Open the NuGet package manager in your Umbraco project solution.\n2. Select and update Umbraco.AI, Umbraco.AI.Core, and Umbraco.AI.Web to version 1.14.0.\n3. Update any provider packages (such as Umbraco.AI.OpenAI, Umbraco.AI.Anthropic, or Umbraco.AI.Amazon) to their respective patched versions.\n4. Inspect the appsettings.json file or environment variables, and structure AI keys under 'Umbraco:AI:Secrets' or 'Umbraco:AI:Variables'.\n5. Replace backoffice connection setting references from legacy prefixes (e.g., $OpenAI:ApiKey) to the new secure prefixes (e.g., $Umbraco:AI:Secrets:OpenAIApiKey).\n6. Deploy the updated application to production and perform validation testing.\n\n## References\n\n- [Official GitHub Security Advisory](https://github.com/umbraco/Umbraco.AI/security/advisories/GHSA-q3v2-xj35-9grx)\n- [GitHub Advisory Database Entry](https://github.com/advisories/GHSA-q3v2-xj35-9grx)\n- [Vendor Announcement Blog Post](https://umbraco.com/blog/security-advisory-june-4-2026-security-patch-for-umbracoai-is-now-available/)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-Q3V2-XJ35-9GRX) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-14T20:12:07.033766Z"}]}