Read the docs
TI-2026-75493 Aliases CVE-2026-111707GHSA-ghmq-xxc8-j8m5

Insecure direct object reference in 99AI exposes chat messages

Priority HIGH 70CWE-639Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
Low · None · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-639.

Summary

99AI through 4.3.0 by vastxie contains an insecure direct object reference (CWE-639) in its chat log query endpoint. The endpoint lacks an owner check, so an unauthenticated remote attacker can read other users' chat messages and task data by iterating sequential chat IDs after obtaining a visitor token.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read other users' chat messages because querySingleChat lacks an owner check. Attackers can send a fingerprint header to obtain a visitor JWT and iterate sequential chatId values to retrieve other users' message content and task data.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0031 23rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
vastxie99AIup to 4.3.0—No fix listedCNA
  • 99AI Vendorvastxie Affected up to 4.3.0 Fixed in — No fix listed CNA

Remediation

The sources list no fixed version for 99AI.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Timeline

  1. 2026-10-16 Threatist record created from CVE-2026-111707
  2. 2026-10-16 CISA SSVC decision points changed
  3. 2026-10-16 Priority changed: MEDIUM → HIGH
  4. 2026-10-16 Alias added: GHSA-ghmq-xxc8-j8m5

References

Advisory 1

Other 3

  • TI-2026-75492 Missing authentication in 99AI exposes all users' chat logs CVSS 4.0HIGH 8.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences