CVE

CVE-2026-124027

8.7

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows unauthenticated attackers to read other tenants' documents. Attackers can enumerate sequential admin_user_id and file id query parameters, bypassing the ownership check, to retrieve PDF-rendered pages of any tenant's knowledge-base documents.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

chatwiki

Updated Nov 13, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

ChatWiki < 2.10.0 - Cross-Tenant Document Page Disclosure

ChatWiki before 2.10.0 exposes /manage/getLibRawFileOnePage without authentication and trusts a caller-supplied admin_user_id, allowing document-page access across tenants. References: https://github.com/zhimaAi/chatwiki/issues/181 https://nvd.nist.gov/vuln/detail/CVE-2026-124027 https://github.com/zhimaAi/chatwiki/commit/d1ca145e283e2cb652e0b1002d5f14d6a46671e3 https://github.com/zhimaAi/chatwiki/releases/tag/v2.10.0 Remediation: Upgrade ChatWiki to version 2.10.0 or later.

10 assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: chatwiki

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →