CVE-2026-57475 Overview
CVE-2026-57475 is a missing authentication vulnerability [CWE-306] in Deloitte AI Assist for Customer. The product accepted unauthenticated POST requests through public-facing API endpoints. A remote attacker could reach these endpoints over the network and submit limited additions to the application configuration.
According to the vendor advisory, the injected configuration additions were not consumed or acted on by the system. Deloitte remediated the issue on 2026-03-25 by restricting network access and enforcing authentication on the previously exposed endpoints.
Critical Impact
Unauthenticated remote attackers could write limited configuration data to a production SaaS endpoint, creating exposure for integrity of stored configuration state.
Affected Products
- Deloitte AI Assist for Customer (SaaS offering, all versions prior to the 2026-03-25 fix)
- Public-facing API endpoints exposed by the AI Assist for Customer service
- Deployments relying on network-boundary controls in lieu of endpoint authentication
Discovery Timeline
- 2026-03-25 - Deloitte restricts network access and enforces authentication on the affected endpoints
- 2026-07-10 - CVE-2026-57475 published to NVD
- 2026-07-16 - Last updated in NVD database
Technical Details for CVE-2026-57475
Vulnerability Analysis
Deloitte AI Assist for Customer exposed API endpoints that accepted POST requests without validating the caller's identity. The service was reachable over the public internet, so any remote client could submit crafted requests to those endpoints. The vulnerability is categorized as Missing Authentication for Critical Function [CWE-306].
The accepted POST requests permitted a limited set of additions to the product configuration. The vendor states the added values were never referenced or processed by downstream logic. Impact is therefore constrained to low integrity effects on stored configuration state, with no reported confidentiality or availability loss.
Root Cause
The root cause is an authentication control gap on public-facing HTTP endpoints. Authentication middleware was not applied to the affected POST handlers, and network-level access restrictions were absent. Requests were processed based solely on their reachability rather than verified identity or authorization scope.
Attack Vector
Exploitation required only network access to the API host. An attacker sent POST requests directly to the vulnerable endpoints without credentials, tokens, or session context. No user interaction, no privileges, and no elevated attack complexity were required. The realized impact stopped at unauthenticated writes of unused configuration entries.
Technical details are available in the ZeroTolerance Analysis on Deloitte AI Assist and the ZeroTolerance Deloitte Advisory PDF. See also the CISA CSAF Document.
Detection Methods for CVE-2026-57475
Indicators of Compromise
- POST requests to Deloitte AI Assist for Customer API endpoints originating from unexpected source IP ranges outside sanctioned integration networks
- HTTP 200 responses to API calls that lack Authorization headers or valid session cookies in access logs predating 2026-03-25
- Unexplained configuration additions appearing in tenant audit trails before the vendor remediation date
Detection Strategies
- Review web access logs and API gateway logs for unauthenticated POST activity to AI Assist for Customer endpoints prior to 2026-03-25
- Correlate configuration-change events with the identity of the initiating principal to surface changes with missing or anonymous actors
- Baseline expected client identifiers and alert on POST traffic from sources not on the integration allow list
Monitoring Recommendations
- Enable and retain full API request logging, including headers and source IPs, for all SaaS AI integrations
- Forward SaaS audit and configuration-change events into a centralized data lake for retroactive hunting
- Alert on any HTTP write method reaching an authentication-optional path in front-end proxies or WAFs
How to Mitigate CVE-2026-57475
Immediate Actions Required
- Confirm your Deloitte AI Assist for Customer tenant is running the post-2026-03-25 service version with authentication enforced
- Audit configuration state for unexpected additions and revert any entries that cannot be attributed to a known administrator
- Inventory all outbound integrations that referenced the previously public endpoints and rotate any associated secrets
Patch Information
Deloitte remediated CVE-2026-57475 on 2026-03-25 by restricting network access and enforcing authentication on the previously exposed API endpoints. The fix was deployed on the vendor side as a SaaS update and does not require customer-driven package upgrades. Customers should confirm remediation with their Deloitte account team and reference the CVE Record for CVE-2026-57474 for related fixes in the same advisory bundle.
Workarounds
- Restrict egress from internal systems to the AI Assist for Customer API to sanctioned integration hosts only
- Front the integration with an authenticating reverse proxy that injects and validates client credentials on every request
- Disable or unlink the integration until the vendor confirms authentication enforcement in your tenant
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
