CVE-2026-111707
Received Received - Intake

99AI Chat Message Exposure via IDOR Vulnerability

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: VulnCheck

Description
99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read other users' chat messages because querySingleChat lacks an owner check. Attackers can send a fingerprint header to obtain a visitor JWT and iterate sequential chatId values to retrieve other users' message content and task data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-111707
EUVD
EUVD-2026-102999

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
vastxie 99AI 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an insecure direct object reference in 99AI versions up to 4.3.0. It allows unauthenticated attackers to read other users' chat messages by exploiting a missing owner check in the querySingleChat function. Attackers can send a fingerprint header to obtain a visitor JWT and then iterate through sequential chatId values to retrieve private message content and task data from other users.

Impact Analysis

This vulnerability could allow attackers to access your private chat messages and task data without authentication. If you use 99AI, your sensitive conversations and information could be exposed. Attackers might exploit this to steal data, impersonate users, or gather intelligence for further attacks.

Compliance Impact

This vulnerability likely violates GDPR and HIPAA due to unauthorized access to personal and sensitive data. GDPR requires protecting personal data, and HIPAA mandates safeguarding protected health information. The exposure of chat messages and task data could lead to compliance breaches, legal penalties, and reputational damage for organizations using 99AI.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111707. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart