Live › vulnerability › CVE-2026-111707
Go to dashboard99AI through 4.3.0 has an insecure direct object reference in querySingleChat, which lacks an owner check. An unauthenticated attacker can send a fingerprint header to get a visitor JWT, then iterate sequential chatId values to read other users' message content and task data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Deployments of 99AI up to and including 4.3.0 that expose the chat interface to visitors. The sources do not say which configurations are affected beyond that, so unknown beyond the version range.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read other users' chat messages because querySingleChat lacks an owner check. Attackers can send a fingerprint header to obtain a visitor JWT and iterate sequential chatId values to retrieve other users' message content and task data.
This page as .md · .json · in your agent: get_signal("CVE-2026-111707")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.