CVE-2026-124027 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
ChatWiki, a knowledge-base product for AI chat, has a GET route that skips authentication and an ownership check. An unauthenticated attacker can enumerate sequential user and file IDs to read PDF-rendered pages of any tenant's documents.
first public Nov 6, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Teams that self-host ChatWiki before version 2.10.0 and expose its management interface to a network an attacker can reach. Instances where the management routes sit behind a strict authentication proxy are likely less exposed, but the sources do not confirm that. Hosted deployments depend on the vendor's own patch status.
Not affected if chatwiki-2.10.0-or-later
Who cares chatwiki, knowledge-base, multi-tenant, self-hosted
2.10.0 are listed as affected./manage/getLibRawFileOnePage in the deployed application and whether it answers without a session.2.10.0 or later.ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows unauthenticated attackers to read other tenants' documents. Attackers can enumerate sequential admin_user_id and file id query parameters, bypassing the ownership check, to retrieve PDF-rendered pages of any tenant's knowledge-base documents.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.