Skip to content
OpenAdvisories

Product · WuKongOpenSource

Wukong AICRM

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-108689

    Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send

    Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write into other users' AI chat sessions by supplying an arbitrary sessionId to POST /chat/send. Attackers can append messages to a victim's conver…

    WuKongOpenSource Wukong AICRM