Skip to content
OpenAdvisories

Vendor

OpenIMSDK

1 known vulnerabilities.

Products

OpenIM Server (open-im-server) 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-69115

    OpenIM Server v3.8.3 Missing Authorization on User and Group Enumeration Endpoints

    OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-only management API endpoints by submitting POST requests with a regular user bearer token to /user/get_users, /user/get_all_users_uid, and …

    OpenIMSDK OpenIM Server (open-im-server)