Description
The upload status SSE implementation on /uploadStatus publishes global upload state to any authenticated listener and includes file_id values that are not scoped to the requesting user. S
Impact
Any authenticated user can observe other users' file identifiers and retrieve unauthorized content, causing cross-tenant data exposure and loss of confidentiality for uploaded documents.
Issue found by aisafe.io
Description
The upload status SSE implementation on
/uploadStatuspublishes global upload state to any authenticated listener and includesfile_idvalues that are not scoped to the requesting user. SImpact
Any authenticated user can observe other users' file identifiers and retrieve unauthorized content, causing cross-tenant data exposure and loss of confidentiality for uploaded documents.
Issue found by aisafe.io