High Volume of Critical Issues for Control “Allow model invoke without Guardrail” (wc-id-2742)

We’ve fixed an issue that caused the control “Allow model invoke without Guardrail for user or role” (wc-id-2742) to be incorrectly marked as Critical. It has now been correctly reclassified as Medium severity.

To see this update reflected in any existing issues, you can either run a manual rescan of the affected connector(s) or wait for the next scheduled scan to apply the change automatically.

A fix has been implemented and we are monitoring the results.

Customers may be seeing an unusually high number of critical issues triggered by the control “Allow model invoke without Guardrail for user or role” (wc-id-2742). This is due to an incorrect severity classification.
We are actively working on a hotfix to reclassify this control to medium severity.
We’ll share an update as soon as the fix is deployed.