{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-115718", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-10-23T11:13:54.116Z", "datePublished": "2026-10-26T11:40:00.956Z", "dateUpdated": "2026-10-26T16:17:17.612Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-10-26T11:45:39.586Z"}, "title": "Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt", "descriptions": [{"lang": "en", "value": "Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoint that allows any authenticated non-Guest session to invoke LLM completions without proper permission checks. Attackers can call the improve_prompt API to leverage the site owner's stored OpenRouter API key via resolve_api_key, consuming paid LLM credits and effectively turning the site into a free LLM proxy."}], "tags": ["x_open-source"], "datePublic": "2026-10-26T00:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "description": "Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "affected": [{"defaultStatus": "unaffected", "vendor": "frappe", "product": "builder", "packageURL": "pkg:github/frappe/builder", "repo": "https://github.com/frappe/builder", "versions": [{"status": "affected", "version": "1.33.0", "versionType": "semver", "lessThan": "1.36.0"}]}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:frappe:builder:*:*:*:*:*:*:*:*", "versionStartIncluding": "1.33.0", "versionEndExcluding": "1.36.0"}]}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW", "version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}}], "references": [{"url": "https://github.com/frappe/builder/releases/tag/v1.36.0", "name": "Vendor Patch", "tags": ["patch"]}, {"url": "https://github.com/frappe/builder/security/advisories/GHSA-58mj-c563-p78w", "name": "Vendor Advisory", "tags": ["vendor-advisory"]}, {"url": "https://www.vulncheck.com/advisories/frappe-builder-before-missing-authorization-via-improve-prompt", "name": "VulnCheck Advisory: Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt", "tags": ["third-party-advisory"]}], "credits": [{"lang": "en", "value": "Mansurzhan Mavlankulov", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "vulncheck"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-26T15:38:15.742479Z", "id": "CVE-2026-115718", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-26T16:17:17.612Z"}}]}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageURL": "pkg:github/frappe/builder", "product": "builder", "repo": "https://github.com/frappe/builder", "vendor": "frappe", "versions": [{"lessThan": "1.36.0", "status": "affected", "version": "1.33.0", "versionType": "semver"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoint that allows any authenticated non-Guest session to invoke LLM completions without proper permission checks. Attackers can call the improve_prompt API to leverage the site owner's stored OpenRouter API key via resolve_api_key, consuming paid LLM credits and effectively turning the site into a free LLM proxy."}], "id": "CVE-2026-115718", "lastModified": "2026-10-26T17:17:17.487", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-115718", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-26T15:38:15.742479Z", "version": "2.0.3"}}]}, "published": "2026-10-26T12:17:05.387", "references": [{"source": "disclosure@vulncheck.com", "url": "https://github.com/frappe/builder/releases/tag/v1.36.0"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/frappe/builder/security/advisories/GHSA-58mj-c563-p78w"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/frappe-builder-before-missing-authorization-via-improve-prompt"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{"bugzilla": {"description": "builder: Frappe Builder: Unauthorized resource consumption via missing authorization in improve_prompt", "id": "2560629", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2560629"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-425", "details": ["A flaw was found in Frappe Builder. A missing authorization check in the improve_prompt endpoint allows an authenticated remote attacker to invoke Large Language Model (LLM) completions using the site owner's stored credentials. By exploiting this issue, an attacker can exhaust paid service credits and misuse the system as an unauthorized proxy for artificial intelligence requests."], "name": "CVE-2026-115718", "package_state": [{"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Fix deferred", "package_name": "rubygem-builder", "product_name": "Red Hat Satellite 6"}], "public_date": "2026-10-26T11:40:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-115718\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-115718\nhttps://github.com/frappe/builder/releases/tag/v1.36.0\nhttps://github.com/frappe/builder/security/advisories/GHSA-58mj-c563-p78w\nhttps://www.vulncheck.com/advisories/frappe-builder-before-missing-authorization-via-improve-prompt"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.33.0,1.36.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "builder", "source": "cna", "vendor": "frappe"}, "product": "builder", "vendor": "frappe"}], "created": "2026-10-26T13:30:08.852536+00:00", "updated": "2026-10-27T08:30:13.157226+00:00", "vendors": ["frappe", "frappe$PRODUCT$builder"]}