Live › vulnerability › CVE-2026-119048
JeeSite's AI CMS chat module fails to check who owns a conversation, so any signed-in user who knows or derives another user's conversation id can read, delete or append to that person's AI chat transcripts. The flaw is an insecure direct object reference reachable through the module's /a/cms/chat endpoints.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 14:25 UTC. All times on this page are UTC.
Teams running JeeSite 5.11.0 through 5.19.1 with the AI CMS chat module enabled and user accounts that can log in. Deployments without the AI chat module, or without multiple authenticated users, are less exposed. The sources do not say whether the module is on by default.
No product ranges from the sources yet.
5.11.0 through 5.19.1./a/cms/chat/...) is enabled on the deployment.5.19.1; the sources do not name the exact fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call /a/cms/chat/message, /a/cms/chat/delete, or /a/cms/chat/completions to read, delete, or append to the victim's AI chat transcripts.
This page as .md · .json · in your agent: get_signal("CVE-2026-119048")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.