CVE-2026-44443
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In Lumiverse before version 0.9.7, the consumeNonce() function does not validate any value from the incoming HTTP request or bind the nonce to the admin's session. If the admin's sign-up fails before the before hook fires (e.g., due to a duplicate email), the nonce remains set and can be used by an attacker within a 10-second window to register an unauthorized account.
Risk Assessment
An attacker can exploit this vulnerability to register an unauthorized account, leading to system integrity compromise and potential access to sensitive data or administrative functions.
Recommendation
Immediately upgrade Lumiverse to version 0.9.7 or later, which includes a fix for this vulnerability.
Other vulnerabilities in Lumiverse
See all- CVE-2026-44451Critical
Lumiverse prior to 0.9.7 has a vulnerability in the component override system that transpiles TSX via Sucrase and executes it with new Function, shadowing dangerous globals. Static protection and shadowing are bypassed by reconstructing identifiers from string fragments and DOM sandbox escape. A malicious theme pack (.lumitheme) can execute code in an authenticated user's session.
- CVE-2026-44450Critical
Vulnerability in Lumiverse (AI chat app) before version 0.9.7 allows a logged-in user to execute arbitrary code on the server via the MCP server creation endpoint. The attacker can use -e or -c flags in args, leading to remote code execution. The server listens on all interfaces and host-header rebinding protection is easily bypassed.
- CVE-2026-44449Critical
Lumiverse before version 0.9.7 contains a command injection vulnerability in the SMB path handling function. When the primary toSmbPath method fails, the code uses an unvalidated basename in the smbclient script, allowing arbitrary command execution via injection of ';' separator or '!cmd' local escape.
- CVE-2026-44444Critical
Vulnerability in Lumiverse – the Spindle extension build pipeline runs `bun install` without `--ignore-scripts`, allowing a malicious extension to execute host-level code before security scanning. Fixed in version 0.9.7.
Original NVD description (English source)
Lumiverse is a full-featured AI chat application. Prior to 0.9.7, consumeNonce() only checks that the module-level variable is set and unexpired. It does not validate any value from the incoming HTTP request or bind the nonce to the admin's session. If the admin's auth.api.signUpEmail() call fails before the before hook fires (e.g. BetterAuth rejects a duplicate email at the validation layer), the nonce is set but never consumed. Any POST /api/auth/sign-up/email request that arrives during the remaining window registers successfully regardless of who sent it. An attacker who can observe or predict when the admin is creating users (must be a dupplicate user) can race the 10-second window to register an unauthorized account. This vulnerability is fixed in 0.9.7.