CVE-2026-57476
MEDIUM
NVD
CVSS Score
4.8
Severity
MEDIUM
Published
Jul 10, 2026
Vendor
unknown
Description
Deloitte AI Assist for Customer exposed unauthenticated API endpoints that allowed an attacker with knowledge of additional parameters to read from or inject content into the retrieval-augmented generation (RAG) corpus. On 2026-03-25, AI Assist for Customer restricted network access and enforced authentication for the previously exposed endpoints.