danswer Unauthenticated User Privilege Escalation Vulnerability Leading to Denial-of-Service

A vulnerability in danswer-ai/danswer version 0.4.1 allows unauthenticated users to create credentials and link them to existing connectors. This issue arises because basic users can perform actions intended for admin users, potentially leading to excessive resource consumption and causing a Denial-of-Service (DoS) condition, along with other significant stability and security issues.

Impact

Exploitation of this vulnerability can cause excessive resource usage, leading to a Denial-of-Service condition and other serious stability and security problems.