Live › vulnerability › CVE-2026-115725
Go to dashboardChatwoot before 4.17.0 lets an authenticated agent bot pass another account's contact inbox source_id to the conversations create endpoint. An attacker can then create or read conversations and send messages to that account's contacts.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Self-hosted or hosted Chatwoot instances running a version before 4.17.0 that have agent bots configured. Exposure needs an agent bot credential, so instances without agent bots have less reason to worry, but upgrading is still the fix.
No product ranges from the sources yet.
unknown if the sources do not give the deployment path.4.17.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access other accounts by supplying a foreign contact inbox source_id. Attackers can call the conversations create endpoint with another account's source_id to create or retrieve conversations and post messages to that account's contacts.
This page as .md · .json · in your agent: get_signal("CVE-2026-115725")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.