TI-2026-83817 CVE-2026-120425 · GHSA-ppjp-65hc-5g55
Authorization bypass in Chatify exposes other users' private channels
Priority MEDIUM 64
Chatify before 1.6.4 contains an authorization bypass vulnerability in the Pusher channel authorization endpoint that allows authenticated users to subscribe to other users' private channels by supplying arbitrary channe…