{"id":"CVE-2026-104443","published":"2026-10-02T12:17:15.323","lastModified":"2026-10-02T14:17:08.213","description":"YesWiki before 4.6.7 contains an empty-filter scope bypass in the triples delete API that allows any authenticated user to delete or forge arbitrary semantic triples regardless of ownership. Attackers can send an empty filter to the triples delete endpoint to remove the admins-group membership triple, emptying the admin group and causing a site-wide authorization lockout.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://github.com/YesWiki/yeswiki/security/advisories/GHSA-9j7h-ccj2-jxv6","tags":[]},{"url":"https://www.vulncheck.com/advisories/yeswiki-before-4.6.7-scope-bypass-via-triples-delete-api","tags":[]},{"url":"https://github.com/YesWiki/yeswiki/security/advisories/GHSA-9j7h-ccj2-jxv6","tags":[]}],"exploitRefs":[{"url":"https://github.com/YesWiki/yeswiki/security/advisories/GHSA-9j7h-ccj2-jxv6","tags":[]},{"url":"https://github.com/YesWiki/yeswiki/security/advisories/GHSA-9j7h-ccj2-jxv6","tags":[]}],"hasPoc":true,"ai":{"summary":"YesWiki before 4.6.7 allows any authenticated user to delete or forge arbitrary semantic triples, potentially leading to a site-wide authorization lockout.","exploitability":"Exploitation is relatively straightforward for any authenticated user with access to the triples delete API, requiring only an empty filter payload.","blast_radius":"If exploited, this flaw could result in a complete loss of administrative control over the YesWiki instance, impacting all users and functionality.","remediation":"Upgrade to YesWiki 4.6.7 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","web","api","semantic-triples"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-04T08:41:33.883Z"}}