Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-54461 EUVD-2025-34738GHSA-fhch-v2x2-xm9c

ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited gues…

Published Oct 16, 2025 · Updated Oct 16, 2025 · Assigned by jpcert

Description

ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited guest user may register itself as a guest user.

Affected products

VendorProductAffectedFixed
NEOJAPAN ChatLuck V6.6 R2.0 and earlier —

References