TI-2026-58804 CVE-2026-85693 · GHSA-258v-w87q-m5c9
Chatbot UI Cross-User Private File Content Disclosure via Retrieval API
Priority LOW 32
Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers to access private file content belonging to other users by supplying arbitrary file UUIDs.