CVE-2026-42276

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-42276", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-26T11:53:27.708Z", "datePublished": "2026-05-08T03:49:56.765Z", "dateUpdated": "2026-05-08T12:57:18.681Z"}, "containers": {"cna": {"title": "Onyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessions", "problemTypes": [{"descriptions": [{"cweId": "CWE-639", "lang": "en", "description": "CWE-639: Authorization Bypass Through User-Controlled Key", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w"}], "affected": [{"vendor": "onyx-dot-app", "product": "onyx", "versions": [{"version": "< 3.0.9", "status": "affected"}, {"version": ">= 3.1.0, < 3.1.6", "status": "affected"}, {"version": ">= 3.2.0, < 3.2.6", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-08T03:51:03.272Z"}, "descriptions": [{"lang": "en", "value": "Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the POST /chat/stop-chat-session/{chat_session_id} endpoint lets any authenticated user stop any other user's active chat session. The endpoint checks authentication but never verifies the session belongs to the caller. An attacker who knows a chat session UUID can kill another user's LLM generation mid-stream. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6."}], "source": {"advisory": "GHSA-rw6w-hp62-gc8w", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-08T12:56:45.370877Z", "id": "CVE-2026-42276", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-08T12:57:18.681Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-42276", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-08T12:56:45.370877Z"}}}], "references": [{"url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-08T12:57:15.220Z"}}], "cna": {"title": "Onyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessions", "source": {"advisory": "GHSA-rw6w-hp62-gc8w", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "onyx-dot-app", "product": "onyx", "versions": [{"status": "affected", "version": "< 3.0.9"}, {"status": "affected", "version": ">= 3.1.0, < 3.1.6"}, {"status": "affected", "version": ">= 3.2.0, < 3.2.6"}]}], "references": [{"url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w", "name": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the POST /chat/stop-chat-session/{chat_session_id} endpoint lets any authenticated user stop any other user's active chat session. The endpoint checks authentication but never verifies the session belongs to the caller. An attacker who knows a chat session UUID can kill another user's LLM generation mid-stream. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "CWE-639: Authorization Bypass Through User-Controlled Key"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-08T03:51:03.272Z"}}}, "cveMetadata": {"cveId": "CVE-2026-42276", "state": "PUBLISHED", "dateUpdated": "2026-05-08T12:57:18.681Z", "dateReserved": "2026-04-26T11:53:27.708Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-05-08T03:49:56.765Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "onyx", "vendor": "onyx-dot-app", "versions": [{"status": "affected", "version": "< 3.0.9"}, {"status": "affected", "version": ">= 3.1.0, < 3.1.6"}, {"status": "affected", "version": ">= 3.2.0, < 3.2.6"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:onyx:onyx:*:*:*:*:*:*:*:*", "matchCriteriaId": "8EA5C508-9DEA-44FA-A188-0B1B87FEDBDE", "versionEndExcluding": "3.0.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:onyx:onyx:*:*:*:*:*:*:*:*", "matchCriteriaId": "ABCC8200-5559-45DD-87E8-1CAD6E7D6828", "versionEndExcluding": "3.1.6", "versionStartIncluding": "3.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:onyx:onyx:*:*:*:*:*:*:*:*", "matchCriteriaId": "F4E43C7B-9888-4225-86E0-0309E34186D2", "versionEndExcluding": "3.2.6", "versionStartIncluding": "3.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the POST /chat/stop-chat-session/{chat_session_id} endpoint lets any authenticated user stop any other user's active chat session. The endpoint checks authentication but never verifies the session belongs to the caller. An attacker who knows a chat session UUID can kill another user's LLM generation mid-stream. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6."}, {"lang": "es", "value": "Onyx es una plataforma de IA de c\u00f3digo abierto. Antes de las versiones 3.0.9, 3.1.6 y 3.2.6, el endpoint POST /chat/stop-chat-session/{chat_session_id} permite a cualquier usuario autenticado detener la sesi\u00f3n de chat activa de cualquier otro usuario. El endpoint verifica la autenticaci\u00f3n pero nunca verifica que la sesi\u00f3n pertenezca al llamador. Un atacante que conoce un UUID de sesi\u00f3n de chat puede detener la generaci\u00f3n LLM de otro usuario a mitad de proceso. Este problema ha sido parcheado en las versiones 3.0.9, 3.1.6 y 3.2.6."}], "id": "CVE-2026-42276", "lastModified": "2026-11-11T23:10:00.263", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42276", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-08T12:56:45.370877Z", "version": "2.0.3"}}]}, "published": "2026-05-08T05:16:10.557", "references": [{"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-rw6w-hp62-gc8w"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,3.0.9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[3.1.0,3.1.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[3.2.0,3.2.6)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "onyx", "source": "cna", "vendor": "onyx-dot-app"}, "product": "onyx", "vendor": "onyx"}], "created": "2026-05-08T06:30:46.290456+00:00", "updated": "2026-05-10T21:26:08.355914+00:00", "vendors": ["onyx", "onyx$PRODUCT$onyx"]}