{"id":"CVE-2026-119048","kind":"vulnerability","aliases":["CVE-2026-119048"],"related":[],"title":"JeeSite: AI chat module lets logged-in users read and delete others' chats","description":"JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call /a/cms/chat/message, /a/cms/chat/delete, or /a/cms/chat/completions to read, delete, or append to the victim's AI chat transcripts.","summary":"JeeSite's AI CMS chat module fails to check who owns a conversation, so any signed-in user who knows or derives another user's conversation id can read, delete or append to that person's AI chat transcripts. The flaw is an insecure direct object reference reachable through the module's /a/cms/chat endpoints.","severity":"medium","cvss":4.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["java","jeesite","runtime","self-hosted"],"not_affected_if":["ai-chat-module-disabled","single-user-deployment","versions-outside-5.11.0-to-5.19.1"],"how_to_check":"- Look for the JeeSite version in the project's pom.xml or deployed build; affected range is `5.11.0` through `5.19.1`.\n- Check whether the AI CMS chat module (`/a/cms/chat/...`) is enabled on the deployment.","fix":"- Move to a JeeSite release later than `5.19.1`; the sources do not name the exact fixed version.","status":"open","published_at":"2026-10-29T14:17:51+00:00","first_seen_at":"2026-10-29T14:25:23+00:00","triaged_at":"2026-10-29T14:26:19+00:00","updated_at":"2026-10-29T14:26:19+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-10-29T14:26:19Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a JeeSite release later than `5.19.1`; the sources do not name the exact fixed version.","reach":"network","title":"JeeSite: AI chat module lets logged-in users read and delete others' chats","impact":"medium","summary":"JeeSite's AI CMS chat module fails to check who owns a conversation, so any signed-in user who knows or derives another user's conversation id can read, delete or append to that person's AI chat transcripts. The flaw is an insecure direct object reference reachable through the module's /a/cms/chat endpoints.","audience":"businesses","category":"runtime","nicknames":[],"who_cares":["jeesite","java","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"other users' AI chat transcripts read, deleted or altered","analyst_note":"Confirm the fixed JeeSite version and whether the AI CMS chat module is enabled by default, using the JeeSite release notes or the vendor advisory.","how_to_check":"- Look for the JeeSite version in the project's pom.xml or deployed build; affected range is `5.11.0` through `5.19.1`.\n- Check whether the AI CMS chat module (`/a/cms/chat/...`) is enabled on the deployment.","plain_action":"","needs_analyst":true,"not_affected_if":["versions-outside-5.11.0-to-5.19.1","ai-chat-module-disabled","single-user-deployment"],"who_is_affected":"Teams running JeeSite 5.11.0 through 5.19.1 with the AI CMS chat module enabled and user accounts that can log in. Deployments without the AI chat module, or without multiple authenticated users, are less exposed. The sources do not say whether the module is on by default.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000742,"input_tokens":4187,"output_tokens":647,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119048':17A,20A '-2026':16A,19A '/a/cms/chat':80B '/a/cms/chat/completions':130C '/a/cms/chat/delete':128C '/a/cms/chat/message':127C '5.11.0':83C '5.19.1':85C 'access':104C 'ai':2A,29B,64B,95C,140C 'allow':100C 'anoth':50B 'append':59B,135C 'attack':115C 'authent':101C 'call':126C 'chat':3A,14A,31B,65B,97C,141C 'check':35B,114C 'cms':30B,96C 'contain':86C 'convers':39B,53B,107C,123C 'cve':15A,18A 'delet':12A,57B,133C 'deriv':49B,119C 'direct':72B,89C 'due':108C 'endpoint':81B 'fail':33B 'flaw':68B 'host':26B 'id':54B,124C 'insecur':71B,88C 'java':21B 'jeesit':1A,22B,27B,82C 'know':47B,117C 'let':5A 'log':7A 'logged-in':6A 'miss':110C 'modul':4A,32B,78B,98C 'object':73B,90C 'other':13A 'own':37B 'ownership':113C 'person':62B 'reachabl':75B 'read':10A,56B,132C 'refer':74B,91C 'revers':112C 'runtim':23B 'self':25B 'self-host':24B 'sign':43B 'signed-in':42B 'transcript':66B,142C 'user':9A,45B,51B,102C,106C 'victim':121C,138C 'vulner':92C","nicknames":[],"mitigations":[],"who_affected":"Teams running JeeSite 5.11.0 through 5.19.1 with the AI CMS chat module enabled and user accounts that can log in. Deployments without the AI chat module, or without multiple authenticated users, are less exposed. The sources do not say whether the module is on by default.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"first_public_at":"2026-10-29T14:17:51+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119048","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119048","severity":null,"published_at":"2026-10-29T14:17:51+00:00","modified_at":"2026-10-29T14:17:51+00:00","first_seen_at":"2026-10-29T14:25:23+00:00","fetched_at":"2026-10-29T14:25:23+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}