Vendors / ChatGPTNextWeb Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now ChatGPTNextWeb records in CISA KEV No ChatGPTNextWeb vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 90
NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.83163 · Published 2024-03-11 · No fix listed CWE-79
Priority HIGH 72
Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authentic…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00915 · Published 2025-11-03 · No fix listed CWE-22
Priority HIGH 70
A weakness has been identified in ChatGPTNextWeb NextChat up to 2.16.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00344 · Published 2026-04-27 · No fix listed CWE-918
Priority MEDIUM 64
A security flaw has been discovered in ChatGPTNextWeb NextChat up to 2.16.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00356 · Published 2026-04-27 · No fix listed CWE-918
Open these records in search → All records by CVSS severity
1 3 6 0 0
THREATIST.IORead the docs