---
id: CVE-2026-85607
title: >-
  Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple
  tRPC procedures (message.list, message.update, message.delete,
  message.clearAfter in server/routerTrpc/message.ts and
  conversation.clearMessages in server/rou…
summary: >-
  Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple
  tRPC procedures (message.list, message.update, message.delete,
  message.clearAfter in server/routerTrpc/message.ts and
  conversation.clearMessages in server/rou…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-639
vendor: blinkospace
product: blinko
affected:
  - blinko <= 1.8.8
published: '2026-09-04'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T15:53:23.707'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-85607'
references:
  - url: 'https://github.com/blinkospace/blinko'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/blinkospace/blinko/blob/1.8.8/server/routerTrpc/conversation.ts
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/blinkospace/blinko/blob/1.8.8/server/routerTrpc/message.ts
    label: disclosure@vulncheck.com
  - url: 'https://github.com/blinkospace/blinko/issues/1218'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/blinko-1.8.7-cross-user-ai-conversation-read-and-write-via-message-trpc-router
    label: disclosure@vulncheck.com
  - url: 'https://github.com/blinkospace/blinko/issues/1218'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00462
epssPercentile: 0.39349
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-08T16:51:31.142490Z'
ingestedAt: '2026-09-08T19:08:49.673Z'
---

## Overview

Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple tRPC procedures (message.list, message.update, message.delete, message.clearAfter in server/routerTrpc/message.ts and conversation.clearMessages in server/routerTrpc/conversation.ts). Although these procedures require authentication, they query the database by caller-supplied conversation or message ID without verifying that the resource belongs to the requesting account. Any authenticated user can therefore read another user's full AI chat history, modify individual message content, and delete or wipe entire conversations by enumerating sequential integer IDs.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.