CVE-2026-120425: high-severity vulnerability in munafio Chatify
Chatify before 1.6.4 Pusher Authorization Bypass via /chat/auth Endpoint
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
18Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1
Chatify before 1.6.4 contains an authorization bypass vulnerability in the Pusher channel authorization endpoint that allows authenticated users to subscribe to other users' private channels by supplying arbitrary channel names. Attackers can request a signature for private-chatify.<victim id> via POST /chat/auth to receive the victim's incoming private messages and attachments in real time.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
munafio · ChatifyReferences
https://github.com/munafio/chatify/blob/v1.6.3/src/ChatifyMessenger.php#L101-L124https://github.com/munafio/chatify/commit/e16bdb197d227aa2a66863c166bbb31c5f45bc2ahttps://github.com/munafio/chatify/issues/412https://github.com/munafio/chatify/releases/tag/v1.6.4https://hackmd.io/@hieund/chatify-pusher-channel-authorization-bypasshttps://www.vulncheck.com/advisories/chatify-before-1.6.4-pusher-authorization-bypass-via-chat-auth-endpoint