{"id":"CVE-2026-111709","kind":"vulnerability","aliases":["CVE-2026-111709"],"related":[],"title":"WhaTicket Community: authenticated agents can read other agents' tickets","description":"WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows authenticated agents to access other agents' tickets because ShowTicketService performs no ownership or queue checks. Attackers can supply another agent's ticket id to GET /tickets/:ticketId and /messages/:ticketId to read full message history and POST WhatsApp replies.","summary":"WhaTicket Community through commit cf04795 does not check ticket ownership or queue when showing a ticket. An logged-in agent who supplies another agent's ticket id can read the full message history and send WhatsApp replies from that ticket.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["package","self-hosted","whaticket","whatsapp"],"not_affected_if":["auth-required","single-agent-use"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-16T18:17:55+00:00","first_seen_at":"2026-10-23T21:57:13+00:00","triaged_at":"2026-10-25T04:18:17+00:00","updated_at":"2026-10-25T04:18:17+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T04:18:17Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"WhaTicket Community: authenticated agents can read other agents' tickets","impact":"medium","summary":"WhaTicket Community through commit cf04795 does not check ticket ownership or queue when showing a ticket. An logged-in agent who supplies another agent's ticket id can read the full message history and send WhatsApp replies from that ticket.","category":"package","nicknames":[],"who_cares":["whaticket","self-hosted","whatsapp"],"confidence":0.6,"needs_auth":"yes","worst_case":"Agent reads other agents' chat history and sends WhatsApp messages","analyst_note":"Confirm the fixed commit or release and the exact version to move to; the source gives only the vulnerable commit cf04795.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["single-agent-use","auth-required"],"who_is_affected":"Teams running WhaTicket Community at or before commit cf04795 with multiple agents sharing one instance. A single-agent deployment has no other agents' tickets to reach, so the exposure is limited there.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000545,"input_tokens":3341,"output_tokens":421,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-111709':12A,15A '-2026':11A,14A '/messages':105C '/tickets':102C 'access':80C 'agent':4A,8A,42B,46B,78C,82C,96C 'allow':76C 'anoth':45B,95C 'attack':92C 'authent':3A,77C 'cf04795':26B,67C 'check':29B,91C 'commit':25B,66C 'communiti':2A,23B,64C 'contain':68C 'cve':10A,13A 'direct':71C 'full':53B,109C 'get':101C 'histori':55B,111C 'host':19B 'id':49B,99C 'insecur':70C 'log':40B 'logged-in':39B 'messag':54B,110C 'object':72C 'ownership':31B,88C 'packag':16B 'perform':86C 'post':113C 'queue':33B,90C 'read':6A,51B,108C 'refer':73C 'repli':59B,115C 'self':18B 'self-host':17B 'send':57B 'show':35B 'showticketservic':85C 'suppli':44B,94C 'ticket':9A,30B,37B,48B,62B,83C,98C 'ticketid':103C,106C 'vulner':74C 'whaticket':1A,20B,22B,63C 'whatsapp':21B,58B,114C","nicknames":[],"mitigations":[],"who_affected":"Teams running WhaTicket Community at or before commit cf04795 with multiple agents sharing one instance. A single-agent deployment has no other agents' tickets to reach, so the exposure is limited there.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-16T18:17:55+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111709","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111709","severity":null,"published_at":"2026-10-16T18:17:55+00:00","modified_at":"2026-10-21T22:16:46+00:00","first_seen_at":"2026-10-23T21:57:13+00:00","fetched_at":"2026-10-23T22:28:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}