---
id: CVE-2026-115718
title: Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt
summary: >-
  Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization
  vulnerability in the improve_prompt endpoint that allows any authenticated
  non-Guest session to invoke LLM completions without proper permission checks.
  Attacker…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'
cvssSource: cna
cwe:
  - CWE-862
vendor: frappe
product: builder
affected:
  - builder >= 1.33.0 < 1.36.0
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T11:45:39.586Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-115718'
references:
  - url: 'https://github.com/frappe/builder/releases/tag/v1.36.0'
    label: Vendor Patch
  - url: 'https://github.com/frappe/builder/security/advisories/GHSA-58mj-c563-p78w'
    label: Vendor Advisory
  - url: >-
      https://www.vulncheck.com/advisories/frappe-builder-before-missing-authorization-via-improve-prompt
    label: >-
      VulnCheck Advisory: Frappe Builder 1.33.0 before 1.36.0 Missing
      Authorization via improve_prompt
tags:
  - cve.org
ingestedAt: '2026-10-26T12:26:18.479Z'
---

## Overview

Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoint that allows any authenticated non-Guest session to invoke LLM completions without proper permission checks. Attackers can call the improve_prompt API to leverage the site owner's stored OpenRouter API key via resolve_api_key, consuming paid LLM credits and effectively turning the site into a free LLM proxy.

## Affected

- `builder >= 1.33.0 < 1.36.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.