Skip to main content

Bisheng flaws enable administrative takeover and data exposure

Source Decision Insights Threat Desk Published October 14, 2026 Companies 4
Human View Machine View

4 companies named across 4 categories, one of 72 articles referencing OpenAI. Previous coverage: Tenable Holdings Expands CyberAgents Exchange With AI Inspector Review Process (Oct 2026).

Companies mentioned

Best suited for

Seniority
Staff
Job function
Cybersecurity / Information Security
Persona
Security Operations Practitioner
Buyer role
Technical Implementer / Administrator
Decision stage
Post Buy
Adoption curve
Early Adopters
Technology maturity
Operational Expansion
Industry
Information Technology / AI Infrastructure / AI Platforms, MLOps & Operations / AI Application & Agent Development Platforms

Our classification, not the publisher's statement. Best suited for, not only for.

Bisheng, an open-source large language model application DevOps platform developed by DataElement, contains three vulnerabilities. The flaws include an authentication bypass in a legacy single sign-on endpoint, an insecure direct object reference, and missing access checks, which could allow unauthenticated attackers to obtain administrative control and authenticated users to reach sensitive data and hardcoded credentials.

CVE-2026-96679 affects the legacy SSO endpoint POST /user/sso. The application accepts JSON payloads containing arbitrary usernames and issues a valid JSON Web Token (JWT) without enforcing any caller authentication, such as signature verification, shared secrets, or network allowlisting. When a supplied username does not exist, the system registers the account automatically. If that account matches the configured administrative username or is the first user in the system, it receives super-administrator privileges.

CVE-2026-96681 involves missing authorization controls across multiple version retrieval endpoints. Flow and workflow version records are retrieved using user-supplied parameters without any data ownership or permission validation, so any authenticated user can query and read the complete Domain-Specific Language (DSL) configurations belonging to other accounts. CVE-2026-100156 concerns the assistant service's prompt auto-optimization feature, where endpoints accept an assistant identifier from the caller without verifying whether the caller owns that assistant.

CVE-2026-96679 allows unauthenticated attackers to bind their session to an existing victim's profile by skipping JWT validation, potentially granting full super-administrative access and resulting in full application compromise. CVE-2026-96681 causes a breach of data confidentiality because the system does not properly validate whether the authenticated user has permission to access the resource. CVE-2026-100156 allows authenticated attackers to run unauthorized AI inferences billed to another user's provider account, such as OpenAI, Azure, or Anthropic, while also leaking the victim assistant's configured tools and workflows.

The vendor has addressed two of the three vulnerabilities in subsequent releases, and CERT/CC recommends upgrading to patched versions. CVE-2026-100156 was remediated in version 2.5.0, and CVE-2026-96681 was remediated in version 3.0.0. The remaining unpatched vulnerability, CVE-2026-96679, remains unpatched because DataElement/Bisheng has not responded to multiple coordination efforts.

For CVE-2026-96679, CERT/CC suggests manual mitigations until an official update is available. Administrators may consider avoiding BISHENG_PRO=true in the environment configuration, disabling or deprecating the legacy SSO endpoint or enforcing global JWT validation, and restricting POST /user/sso network access to loopback or same-origin for defense-in-depth. The affected function is sso() in src/backend/bisheng/user/api/user.py. Louis Sanchez of Voke Cyber reported these vulnerabilities.

Blog post, originally published by Laurie Tyzenhaus at kb.cert.org.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/bisheng-flaws-enable-administrative-takeover-and-data-exposure/",
        "name": "Bisheng flaws enable administrative takeover and data exposure",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/bisheng-flaws-enable-administrative-takeover-and-data-exposure/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/openai/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/openai/",
      "name": "OpenAI"
    },
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Seniority",
        "audienceType": "Staff"
      },
      {
        "@type": "Audience",
        "additionalType": "Job function",
        "audienceType": "Cybersecurity / Information Security"
      },
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Practitioner"
      },
      {
        "@type": "Audience",
        "additionalType": "Buyer role",
        "audienceType": "Technical Implementer / Administrator"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Adopters"
      },
      {
        "@type": "Audience",
        "additionalType": "Technology maturity",
        "audienceType": "Operational Expansion"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / AI Infrastructure / AI Platforms, MLOps & Operations / AI Application & Agent Development Platforms"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-10-14T12:04:24-06:00",
    "datePublished": "2026-10-14T12:04:19-06:00",
    "description": "Three Bisheng vulnerabilities, including a legacy SSO authentication bypass, allow administrative takeover and cross-user data exposure, according to CERT/CC.",
    "headline": "Bisheng flaws enable administrative takeover and data exposure",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Laurie Tyzenhaus"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://kb.cert.org/vuls/id/166125"
    },
    "keywords": [
      "Application",
      "Authentication",
      "Data",
      "JSON",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/bisheng-flaws-enable-administrative-takeover-and-data-exposure/",
      "@type": "WebPage",
      "sdDatePublished": "2026-10-14",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/anthropic/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/anthropic/",
        "name": "Anthropic"
      },
      {
        "@id": "https://decisioninsights.ai/registry/flow/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/flow/",
        "name": "FLOW"
      },
      {
        "@id": "https://decisioninsights.ai/registry/microsoft/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/microsoft/",
        "name": "Microsoft"
      },
      {
        "@id": "https://decisioninsights.ai/registry/openai/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/openai/",
        "name": "OpenAI"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages