CyberRota Analysis
AI-GeneratedThe vulnerability in Julep's get_execution_details endpoint allows authenticated users to exploit insecure direct object references, enabling them to access sensitive execution data from other tenants by manipulating execution_id values. This could lead to unauthorized disclosure of task inputs, outputs, and metadata, posing a significant risk to tenant data privacy. Organizations using Julep should prioritize addressing this issue to safeguard against potential data breaches and ensure tenant isolation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Julep contains an insecure direct object reference vulnerability in the get_execution_details endpoint that allows authenticated tenants to read another tenant's execution data. Attackers can supply arbitrary execution_id values to retrieve sensitive execution records including task inputs, outputs, metadata, and temporal task tokens from other tenants.