---
id: "CVE-2026-119048"
kind: "vulnerability"
aliases: ["CVE-2026-119048"]
title: "JeeSite: AI chat module lets logged-in users read and delete others' chats"
severity: "medium"
cvss: 4.2
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["java", "jeesite", "runtime", "self-hosted"]
not_affected_if: ["ai-chat-module-disabled", "single-user-deployment", "versions-outside-5.11.0-to-5.19.1"]
published_at: "2026-10-29T14:17:51+00:00"
first_seen_at: "2026-10-29T14:25:23+00:00"
updated_at: "2026-10-29T14:26:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119048", "first_seen_at": "2026-10-29T14:25:23+00:00"}]
---

# JeeSite: AI chat module lets logged-in users read and delete others' chats

JeeSite's AI CMS chat module fails to check who owns a conversation, so any signed-in user who knows or derives another user's conversation id can read, delete or append to that person's AI chat transcripts. The flaw is an insecure direct object reference reachable through the module's /a/cms/chat endpoints.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Look for the JeeSite version in the project's pom.xml or deployed build; affected range is `5.11.0` through `5.19.1`.
- Check whether the AI CMS chat module (`/a/cms/chat/...`) is enabled on the deployment.

## Fix

- Move to a JeeSite release later than `5.19.1`; the sources do not name the exact fixed version.

## Timeline

- 2026-10-29T14:25:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119048

## From the sources

JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call /a/cms/chat/message, /a/cms/chat/delete, or /a/cms/chat/completions to read, delete, or append to the victim's AI chat transcripts.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_