A vulnerability was discovered in NocoBase plugin-ai versions 2.1.0 through 2.2.41, where an authenticated user can bypass authorization checks to access AI employees not assigned to them. This is due to the getAccessibleAIEmployee function not properly filtering by role. An attacker can exploit this vulnerability using the dispatch-sub-agent-task tool to execute unauthorized AI employees and the get-ai-employee tool to read sensitive data, such as prompts and tool configurations. This matters to AI developers and operators as it allows unauthorized access to AI employees and their associated data, potentially leading to data breaches or system compromise.