AIKIDO-2026-857777

TL;DR

Files attached to AI agent chat conversations are served through a file-download endpoint that allows anonymous access and does not verify that the caller is entitled to the requested file. Anyone who knows or obtains a file's URL can download the uploaded document without authentication or ownership checks. Because the files come from user submissions they can expose confidential information to unauthorized parties, and a leaked URL keeps working even after access is otherwise revoked. The fix adds authentication and authorization checks to the file-serving endpoint before returning uploaded files.