---
id: CVE-2026-82271
title: >-
  R2R through 3.6.5 fails to properly validate user ownership in conversation
  update and message handlers, allowing authenticated users to modify other
  users' conversations
summary: >-
  R2R through 3.6.5 fails to properly validate user ownership in conversation
  update and message handlers, allowing authenticated users to modify other
  users' conversations. Attackers can supply arbitrary conversation identifiers
  to rename…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'
cwe:
  - CWE-639
published: '2026-08-28'
updated: '2026-09-23'
sourceUpdated: '2026-09-23T17:17:45.983'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-82271'
references:
  - url: 'https://github.com/SciPhi-AI/R2R'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/SciPhi-AI/R2R/blob/9c5a94d151f90876bd7eb860f300a8fd662dc481/py/core/main/api/v3/conversations_router.py
    label: disclosure@vulncheck.com
  - url: 'https://github.com/SciPhi-AI/R2R/issues/2292'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/r2r-missing-ownership-check-allows-modifying-other-users-conversations
    label: disclosure@vulncheck.com
  - url: 'https://github.com/SciPhi-AI/R2R/issues/2292'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00268
epssPercentile: 0.16771
ingestedAt: '2026-09-23T17:28:14.812Z'
vendor: SciPhi-AI
product: r2r
affected:
  - r2r <= 3.6.5
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-08-31T19:07:14.460529Z'
---

## Overview

R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users' conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users' conversation histories, corrupting state and injecting malicious content.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.