CVE-2026-108689mediumCWE-639

CVE-2026-108689: medium-severity vulnerability in WuKongOpenSource Wukong AICRM

Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send

Published 11 Oct 2026 · Updated 18 Oct 2026

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 5.3epss 0.2%

Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write into other users' AI chat sessions by supplying an arbitrary sessionId to POST /chat/send. Attackers can append messages to a victim's conversation and receive streamed assistant replies built from the victim's last 20 messages, disclosing conversation content.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Affected products

WuKongOpenSource · Wukong AICRM

public PoCs found — 1

cve_referencegithub.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/Wukong-AICRM/poc_chat_send.pyunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Related CVEs — WuKongOpenSource Wukong AICRM

In the same product, most dangerous first.

CVE-2026-110207HIGHWukong AICRM through 20260610 Missing Authorization in User and Role Management APIsEPSS 0.4%CVE-2026-110208HIGHWukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider KeysEPSS 0.4%

References

https://github.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/Wukong-AICRM/poc_chat_send.py https://github.com/WuKongOpenSource/Wukong-AICRM/blob/cdd1fbc3187d2bcbf2cdf2be7d50c988959da356/backend/src/main/java/com/kakarote/ai_crm/service/impl/ChatServiceImpl.java#L270-L283 https://www.vulncheck.com/advisories/wukong-aicrm-through-20260610-authorization-bypass-via-user-controlled-session-id-in-post-chat-send