Critical severity9.8NVD Advisory· Published Apr 26, 2024· Updated Apr 15, 2026
CVE-2024-32881
CVE-2024-32881
Description
Danswer is the AI Assistant connected to company's docs, apps, and people. Danswer is vulnerable to unauthorized access to GET/SET of Slack Bot Tokens. Anyone with network access can steal slack bot tokens and set them. This implies full compromise of the customer's slack bot, leading to internal Slack access. This issue was patched in version 3.63.
Patches
5df30014c5d8e89ff07a96b41bd7e21a6388789ff07a96b41bd7e21a63887Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
3News mentions
0No linked articles in our index yet.