A vulnerability (CVE-2026-125397) exists in NocoBase plugin-ai versions 2.1.0 through 2.2.41 due to an authorization bypass in the getAccessibleAIEmployee function. This allows authenticated users to access unassigned AI employees by manipulating the role-derived filter with a supplied username. Attackers can exploit this vulnerability to run ungranted AI employees with elevated permissions and read sensitive data, such as prompts and tool configurations. This matters to people building or operating AI agents as it enables unauthorized access to potentially sensitive AI resources, potentially leading to data breaches or unauthorized AI activity.