Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-80337 EUVD-2026-91324GHSA-352f-59q8-5jw5

Unauthorized Cross-Chatbot Tool Invocation in HAVELSAN's Sef - AI Chatbot Platform

Published Oct 2, 2026 · Updated Oct 2, 2026 · Assigned by TR-CERT

Description

Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported.

Affected products

VendorProductAffectedFixed
HAVELSAN Sef - AI Chatbot Platform < 2.1 2.1

References