Skip to content
OpenAdvisories

Vendor

sdelements

3 known vulnerabilities.

Products

lets-chat 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-66751 Public exploit

    Let's Chat 0.3.0 - 0.4.8 Improper Authorization via DELETE /rooms/:room

    Let's Chat 0.3.0 through 0.4.8 contains an improper authorization vulnerability that allows any authenticated user to archive any room on the server by sending a DELETE request to the rooms handler without ownership verification. Attackers can enumerate room …

    sdelements lets-chat
  • Medium 4.3
    CVE-2026-66750 Public exploit

    Let's Chat 0.3.0 - 0.4.8 Broken Access Control File Disclosure via GET /files route

    Let's Chat 0.3.0 through 0.4.8 contains a broken access control vulnerability that allows authenticated attackers to download file attachments from private and password-protected rooms they are not a member of by exploiting missing room membership checks in t…

    sdelements lets-chat
  • Medium 6.5
    CVE-2026-66749 Public exploit

    Let's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup

    Let's Chat 0.4.0 through 0.4.8 contains a null dereference vulnerability that allows authenticated attackers to crash the server by supplying a valid 24-character hex string room parameter that matches no document in the database. Attackers can send a crafted…

    sdelements lets-chat