Skip to content
OpenAdvisories

Product · asternic

wuzapi

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-126807

    WuzAPI through 1.1.0 Cross-Tenant Information Disclosure via /chat/history

    WuzAPI through 1.1.0 contains a cross-tenant information disclosure vulnerability in the GetHistory handler that allows authenticated users to view other tenants' chat metadata. Attackers with message history enabled can request GET /chat/history with chat_ji…

    asternic wuzapi