Insufficient Access Control in lunary-ai/lunary

Vulnerability

Overview In lunary-ai/lunary version 1.2.13, a vulnerability due to insufficient granularity of access control allows users to create, update, get, and delete prompt variations for datasets not owned by their organization. The root cause is the application's failure to properly validate the ownership of dataset prompts and their variations against the organization or project of the requesting user [1][2].

Exploitation

This issue can be exploited by any authenticated user who can make API requests to manipulate prompt variations. The attacker does not need special privileges beyond a valid user account, and the attack does not require the dataset to be shared or publicly accessible. The lack of proper authorization checks allows the attacker to target datasets belonging to other organizations or projects [1][2].

Impact

Successful exploitation enables unauthorized modifications to dataset prompts, including creating, updating, retrieving, or deleting prompt variations. This compromises the integrity and consistency of dataset information, potentially altering experimental results and leading to data corruption or loss [1][2].

Mitigation

As of the publication date, users should update to a patched version of lunary-ai/lunary beyond 1.2.13. No workaround is documented; upgrading is the recommended action [1][2].