Information Disclosure in lunary-ai/lunary

Vulnerability

Details

The endpoint runs/{run_id}/related in lunary-ai/lunary fails to verify that the requesting user has the necessary access rights to the run(s) they are querying. This access control omission means that any user, regardless of their authorization level, can retrieve information about any run provided they know its run_id. The vulnerability affects the main branch at commit a761d833 [1].

Exploitation

An attacker can exploit this vulnerability by sending a request to the /runs/{run_id}/related endpoint with a known run_id, which could be obtained from a public run or guessed. The endpoint not only returns the specified run but also all runs that have that run_id listed as their parent run. This allows the attacker to traverse the run hierarchy and gather information about related non-public runs without proper authorization [1]. The vulnerability was reported via the Huntr bug bounty platform [2].

Impact

Successful exploitation leads to unauthorized information disclosure of non-public runs and their relationships. This could expose sensitive data, internal processes, or business logic that are intended to be restricted to specific users or roles.

Mitigation

As of the publication date, the vulnerability remains unpatched in the main branch. Users of lunary-ai/lunary should implement proper access control checks on the runs/{run_id}/related endpoint to ensure that only authorized users can access runs and their related runs. The specific vulnerable commit is a761d833 [1].