Skip to content
OpenAdvisories

Vendor

rmyndharis

2 known vulnerabilities.

Products

OpenWA 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2026-91161

    OpenWA: VIEWER API keys can read WhatsApp group invite codes

    OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the GET /api/sessions/{sessionId}/groups/{groupId}/invite-code endpoint and the GroupGetInviteCode MCP tool have no OPERATOR role requirement, allowing a valid VIEWER key scoped…

    rmyndharis OpenWA