Medium severity · published Oct 11, 2026
CVE-2026-108689
Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send
5.4
CVSS
0.2%
EPSS
No
On KEV
Description
Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write into other users' AI chat sessions by supplying an arbitrary sessionId to POST /chat/send. Attackers can append messages to a victim's conversation and receive streamed assistant replies built from the victim's last 20 messages, disclosing conversation content.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
Wukong AICRM · WuKongOpenSource
through 20260610 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-108689
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-108689
exploit
https://github.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/Wukong-AICRM/poc_chat_send.py
technical-description
https://github.com/WuKongOpenSource/Wukong-AICRM/blob/cdd1fbc3187d2bcbf2cdf2be7d50c988959da356/backend/src/main/java/com/kakarote/ai_crm/service/impl/ChatServiceImpl.java#L270-L283
third-party-advisory
https://www.vulncheck.com/advisories/wukong-aicrm-through-20260610-authorization-bypass-via-user-controlled-session-id-in-post-chat-send
More from Wukong AICRM
8.8
CVE-2026-110207
Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs
7.1
CVE-2026-110208
Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys