langchain4j-aideepin issue 118: cross-user conversation and memory access

Evidence record

Read the original source ↗

Claim-level citations (3)

• supportsA langchain4j-aideepin chat endpoint returned another user's agent memory by conversation ID: On November 9 the langchain4j-aideepin maintainer linked a source fix in commit 483499b and closed issue #118; the issue does not establish a first fixed packaged release.

  Issue #118 Activity: maintainer acknowledgement and issue closure November 9, 2026, referencing fix commit 483499b

• supportsA langchain4j-aideepin chat endpoint returned another user's agent memory by conversation ID: Issue #118 identifies three langchain4j-aideepin message-reference endpoints selecting another account’s knowledge, memory and graph records by supplied message UUID without an owner check in version 3.31.0. This is a static source finding; the reporter did not run cross-account requests.

  Issue #118 Description and Verification: three CharacterMessageController ref endpoints and mappers selecting b.uuid without user_id, static review at tag v3.31.0; no live requests executed

• supportsA langchain4j-aideepin chat endpoint returned another user's agent memory by conversation ID: No in-the-wild victims or verified patched release are recorded in the reviewed issue.

  Issue #118: Status and limitations