CVE-2026-111706

HighCVSS 7.5

Published: 16/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 17/10/2026(UTC)NVD NIST

Summary

99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email fields to download xlsx files containing usernames, emails, prompts, and AI answers.

Risk Assessment

An unauthenticated attacker can mass-export all users' chat data, resulting in a serious leak of personal data and conversation content.

Recommendation

Add authentication and authorization to the /api/chatLog/exportExcel route and update 99AI to a version containing the fix.

Other vulnerabilities in 99AI

CVE-2026-111707Medium
99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read other users' chat messages because querySingleChat lacks an owner check. Attackers can send a fingerprint header to obtain a visitor JWT and iterate sequential chatId values to retrieve other users' message content and task data.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS