Medium severity · published Oct 29, 2026
CVE-2026-119048
JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module
New
4.2
CVSS
–
EPSS
No
On KEV
Description
JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call /a/cms/chat/message, /a/cms/chat/delete, or /a/cms/chat/completions to read, delete, or append to the victim's AI chat transcripts.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JE
JeeSite · thinkgem
5.11.0 through 5.19.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-119048
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-119048
issue-tracking
https://github.com/thinkgem/jeesite5/issues/43
product
https://github.com/thinkgem/jeesite5
patch
https://github.com/thinkgem/jeesite5/commit/cbc5ba7a37fd93f38c46ef656bd31442fe6f8015
technical-description
https://github.com/thinkgem/jeesite5/blob/5b5e2cf0adc45a1abe33d0f4ca149590d149b82d/modules/ai/ai-cms/src/main/java/com/jeesite/modules/ai/cms/service/CacheChatMemoryRepository.java#L59-L62
technical-description
https://github.com/thinkgem/jeesite5/blob/5b5e2cf0adc45a1abe33d0f4ca149590d149b82d/modules/ai/ai-cms/src/main/java/com/jeesite/modules/ai/cms/service/AiCmsChatService.java#L111-L116
technical-description
https://hackmd.io/@hieund/jeesite5-ai-cms-chat-conversation-idor
More from JeeSite
8.8
CVE-2025-7759
thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery
8.8
CVE-2025-5186
thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery
6.1
CVE-2024-8112
thinkgem JeeSite Cookie login cross site scripting
5.4
CVE-2025-7865
thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting
5.4
CVE-2025-7864
thinkgem JeeSite FileUploadController.java upload unrestricted upload