Description
An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated attackers to obtain sensitive information, including SHA256 password hashes, via enumerating user IDs.
High · 7.5
CVE-2026-36719
EUVD-2026-35921GHSA-qwrx-6jf6-89hf
An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated attackers to obtain se…
Published Jun 9, 2026 · Updated Jun 10, 2026 · Assigned by mitre