Subscriber Data Exposure in Chatway Live Chat & AI Chatbot

Publication date: 2026-06-15

Last updated on: 2026-06-15

Assigner: Patchstack

Description

Subscriber Sensitive Data Exposure in Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons <= 1.4.8 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-15

Last Modified

2026-06-15

Generated

2026-07-06

AI Q&A

2026-06-16

EPSS Evaluated

2026-07-04

NVD

CVE-2026-49082

Affected Vendors & Products

Vendor	Product	Version / Range
chatway	live_chat	to 1.4.8 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-201	The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

Attack-Flow Graph

Executive Summary

This vulnerability involves the exposure of subscriber sensitive data in the Chatway Live Chat software, specifically in versions up to and including 1.4.8. It affects the AI Chatbot, Customer Support, FAQ, Helpdesk Customer Service, and Chat Buttons components.

Impact Analysis

The vulnerability can lead to unauthorized access to sensitive subscriber data, potentially compromising confidentiality, integrity, and availability of that data. This could result in data breaches, loss of customer trust, and operational disruptions.

Hi! I’m here to help you understand CVE-2026-49082. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70