Skip to content
OpenAdvisories

Product · OpenIMSDK

OpenIM Server (open-im-server)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-69115

    OpenIM Server v3.8.3 Missing Authorization on User and Group Enumeration Endpoints

    OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-only management API endpoints by submitting POST requests with a regular user bearer token to /user/get_users, /user/get_all_users_uid, and …

    OpenIMSDK OpenIM Server (open-im-server)