Description
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joyland | Joyland.ai | — | — |
Medium · 5.3
CVE-2026-102669
EUVD-2026-91028GHSA-3v5q-8wpg-2hx4
Joyland AI hostname checking disabled
Published Oct 1, 2026 · Updated Oct 11, 2026 · Assigned by cisa-cg