Search
Find a vulnerability
Search criteria
4 vulnerabilities found for tamery by wannabespace
CVE-2026-119664 (GCVE-0-2026-119664)
Vulnerability from nvd – Published: 2026-10-30 14:16 – Updated: 2026-10-30 14:16
VLAI
EPSS
VEX
Title
Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update
Summary
Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync API chatsMessages.update handler, which leaves the client-supplied chatId writable. Authenticated Pro subscribers who know another user's chat ID can move messages with arbitrary parts and metadata into the victim's AI chat history.
Severity
4.3 (Medium)
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://github.com/wannabespace/tamery/issues/601 | issue-tracking |
| https://github.com/wannabespace/tamery/commit/76e… | patch |
| https://github.com/wannabespace/tamery/blob/v0.32… | technical-description |
| https://hackmd.io/@hieuPenguinnn/conar-broken-own… | third-party-advisory |
| https://github.com/wannabespace/tamery | product |
| https://www.vulncheck.com/advisories/tamery-conar… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| wannabespace | tamery |
Affected:
0.26.1 , < 0.99.0
(semver)
|
Date Public
2026-10-22 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "tamery",
"repo": "https://github.com/wannabespace/tamery",
"vendor": "wannabespace",
"versions": [
{
"lessThan": "0.99.0",
"status": "affected",
"version": "0.26.1",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "hieuPenguinnn"
},
{
"lang": "en",
"type": "remediation developer",
"value": "letstri"
}
],
"datePublic": "2026-10-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync API chatsMessages.update handler, which leaves the client-supplied chatId writable. Authenticated Pro subscribers who know another user\u0027s chat ID can move messages with arbitrary parts and metadata into the victim\u0027s AI chat history."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T14:16:24.007Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/wannabespace/tamery/issues/601"
},
{
"tags": [
"patch"
],
"url": "https://github.com/wannabespace/tamery/commit/76e75a9569f31405751a63048bae076f500c1c2c"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/wannabespace/tamery/blob/v0.32.0/apps/api/orpc/routers/chats-messages/update.ts#L9-L36"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://hackmd.io/@hieuPenguinnn/conar-broken-ownership-cross-user-write"
},
{
"tags": [
"product"
],
"url": "https://github.com/wannabespace/tamery"
},
{
"name": "VulnCheck Advisory: Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/tamery-conar-0.26.1-before-0.99.0-authorization-bypass-via-chatsmessages-update"
}
],
"title": "Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-119664",
"datePublished": "2026-10-30T14:16:24.007Z",
"dateReserved": "2026-10-30T13:43:50.626Z",
"dateUpdated": "2026-10-30T14:16:24.007Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119663 (GCVE-0-2026-119663)
Vulnerability from nvd – Published: 2026-10-30 14:16 – Updated: 2026-10-30 14:16
VLAI
EPSS
VEX
Title
Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create
Summary
Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create handler that allows authenticated users to attach resources to other users' connections. Attackers owning one connection can include a victim's connectionId in a batch request to insert attacker-named resource rows listed by the victim's client.
Severity
4.3 (Medium)
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://github.com/wannabespace/tamery/issues/601 | issue-tracking |
| https://github.com/wannabespace/tamery/commit/400… | patch |
| https://github.com/wannabespace/tamery/blob/v0.32… | technical-description |
| https://hackmd.io/@hieuPenguinnn/conar-broken-own… | third-party-advisory |
| https://github.com/wannabespace/tamery | product |
| https://www.vulncheck.com/advisories/tamery-conar… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| wannabespace | tamery |
Affected:
0.32.0 , < 0.99.0
(semver)
|
Date Public
2026-10-22 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "tamery",
"repo": "https://github.com/wannabespace/tamery",
"vendor": "wannabespace",
"versions": [
{
"lessThan": "0.99.0",
"status": "affected",
"version": "0.32.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "hieuPenguinnn"
},
{
"lang": "en",
"type": "remediation developer",
"value": "letstri"
}
],
"datePublic": "2026-10-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create handler that allows authenticated users to attach resources to other users\u0027 connections. Attackers owning one connection can include a victim\u0027s connectionId in a batch request to insert attacker-named resource rows listed by the victim\u0027s client."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T14:16:23.361Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/wannabespace/tamery/issues/601"
},
{
"tags": [
"patch"
],
"url": "https://github.com/wannabespace/tamery/commit/400a9001a661e5ab2f87c51de25da1c4afa7ceed"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/wannabespace/tamery/blob/v0.32.0/apps/api/orpc/routers/connections-resources/create.ts#L14-L32"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://hackmd.io/@hieuPenguinnn/conar-broken-ownership-cross-user-write"
},
{
"tags": [
"product"
],
"url": "https://github.com/wannabespace/tamery"
},
{
"name": "VulnCheck Advisory: Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/tamery-conar-0.32.0-before-0.99.0-broken-authorization-via-connectionsresources-create"
}
],
"title": "Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-119663",
"datePublished": "2026-10-30T14:16:23.361Z",
"dateReserved": "2026-10-30T13:43:50.239Z",
"dateUpdated": "2026-10-30T14:16:23.361Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119664 (GCVE-0-2026-119664)
Vulnerability from cvelistv5 – Published: 2026-10-30 14:16 – Updated: 2026-10-30 14:16
VLAI
EPSS
VEX
Title
Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update
Summary
Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync API chatsMessages.update handler, which leaves the client-supplied chatId writable. Authenticated Pro subscribers who know another user's chat ID can move messages with arbitrary parts and metadata into the victim's AI chat history.
Severity
4.3 (Medium)
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://github.com/wannabespace/tamery/issues/601 | issue-tracking |
| https://github.com/wannabespace/tamery/commit/76e… | patch |
| https://github.com/wannabespace/tamery/blob/v0.32… | technical-description |
| https://hackmd.io/@hieuPenguinnn/conar-broken-own… | third-party-advisory |
| https://github.com/wannabespace/tamery | product |
| https://www.vulncheck.com/advisories/tamery-conar… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| wannabespace | tamery |
Affected:
0.26.1 , < 0.99.0
(semver)
|
Date Public
2026-10-22 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "tamery",
"repo": "https://github.com/wannabespace/tamery",
"vendor": "wannabespace",
"versions": [
{
"lessThan": "0.99.0",
"status": "affected",
"version": "0.26.1",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "hieuPenguinnn"
},
{
"lang": "en",
"type": "remediation developer",
"value": "letstri"
}
],
"datePublic": "2026-10-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync API chatsMessages.update handler, which leaves the client-supplied chatId writable. Authenticated Pro subscribers who know another user\u0027s chat ID can move messages with arbitrary parts and metadata into the victim\u0027s AI chat history."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T14:16:24.007Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/wannabespace/tamery/issues/601"
},
{
"tags": [
"patch"
],
"url": "https://github.com/wannabespace/tamery/commit/76e75a9569f31405751a63048bae076f500c1c2c"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/wannabespace/tamery/blob/v0.32.0/apps/api/orpc/routers/chats-messages/update.ts#L9-L36"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://hackmd.io/@hieuPenguinnn/conar-broken-ownership-cross-user-write"
},
{
"tags": [
"product"
],
"url": "https://github.com/wannabespace/tamery"
},
{
"name": "VulnCheck Advisory: Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/tamery-conar-0.26.1-before-0.99.0-authorization-bypass-via-chatsmessages-update"
}
],
"title": "Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-119664",
"datePublished": "2026-10-30T14:16:24.007Z",
"dateReserved": "2026-10-30T13:43:50.626Z",
"dateUpdated": "2026-10-30T14:16:24.007Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119663 (GCVE-0-2026-119663)
Vulnerability from cvelistv5 – Published: 2026-10-30 14:16 – Updated: 2026-10-30 14:16
VLAI
EPSS
VEX
Title
Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create
Summary
Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create handler that allows authenticated users to attach resources to other users' connections. Attackers owning one connection can include a victim's connectionId in a batch request to insert attacker-named resource rows listed by the victim's client.
Severity
4.3 (Medium)
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://github.com/wannabespace/tamery/issues/601 | issue-tracking |
| https://github.com/wannabespace/tamery/commit/400… | patch |
| https://github.com/wannabespace/tamery/blob/v0.32… | technical-description |
| https://hackmd.io/@hieuPenguinnn/conar-broken-own… | third-party-advisory |
| https://github.com/wannabespace/tamery | product |
| https://www.vulncheck.com/advisories/tamery-conar… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| wannabespace | tamery |
Affected:
0.32.0 , < 0.99.0
(semver)
|
Date Public
2026-10-22 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "tamery",
"repo": "https://github.com/wannabespace/tamery",
"vendor": "wannabespace",
"versions": [
{
"lessThan": "0.99.0",
"status": "affected",
"version": "0.32.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "hieuPenguinnn"
},
{
"lang": "en",
"type": "remediation developer",
"value": "letstri"
}
],
"datePublic": "2026-10-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create handler that allows authenticated users to attach resources to other users\u0027 connections. Attackers owning one connection can include a victim\u0027s connectionId in a batch request to insert attacker-named resource rows listed by the victim\u0027s client."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T14:16:23.361Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/wannabespace/tamery/issues/601"
},
{
"tags": [
"patch"
],
"url": "https://github.com/wannabespace/tamery/commit/400a9001a661e5ab2f87c51de25da1c4afa7ceed"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/wannabespace/tamery/blob/v0.32.0/apps/api/orpc/routers/connections-resources/create.ts#L14-L32"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://hackmd.io/@hieuPenguinnn/conar-broken-ownership-cross-user-write"
},
{
"tags": [
"product"
],
"url": "https://github.com/wannabespace/tamery"
},
{
"name": "VulnCheck Advisory: Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/tamery-conar-0.32.0-before-0.99.0-broken-authorization-via-connectionsresources-create"
}
],
"title": "Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-119663",
"datePublished": "2026-10-30T14:16:23.361Z",
"dateReserved": "2026-10-30T13:43:50.239Z",
"dateUpdated": "2026-10-30T14:16:23.361Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}