Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

echo-knowledge-base: Unauthorized Access to Sensitive Data

CVE-2026-25402
Summary

The echo-knowledge-base software has a security issue that allows unauthorized users to access sensitive information. This affects the Knowledge Base for Documentation, FAQs with AI Assistance. If not fixed, an attacker could potentially access confidential data.

Original title
Missing Authorization vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base allows Exploiting Incorrectly Configured Access Control Security Lev...
Original description
Missing Authorization vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through <= 16.011.0.
nvd CVSS3.1 4.3
Vulnerability type
CWE-862 Missing Authorization
Published: 19 Feb 2026 · Updated: 11 Mar 2026 · First seen: 6 Mar 2026