CVE-2026-27595

The POST endpoint `/apps/:appId/agent` required no authentication or CSRF validation, allowing any network user to call it directly. The attacker could chain multiple vulnerabilities: lack of per-application authorization mechanism, absence of session authentication, and cache key collision error between master key and read-only master key. The result of this chain of vulnerabilities was gaining access to database operations with master key privileges. The AI Agent feature is optional — dashboards without a configured agent block are not vulnerable.

An unauthenticated remote attacker can perform arbitrary read and write operations on any Parse Server database connected to the vulnerable dashboard, including modifying, deleting, or exfiltrating all application data.

Parse Dashboard must be updated to version 9.0.0-alpha.8 or later, which adds authentication, CSRF validation, and per-application authorization middleware for the agent endpoint. As a temporary workaround, remove or comment out the agent configuration block in the Parse Dashboard configuration file.

Parseplatform Parse Dashboard versions 7.3.0-alpha.42 through 9.0.0-alpha.7 (inclusive) with active agent block configuration.