CVE-2026-57206

HighCVSS 8.6

Published: 16/07/2026(UTC)Updated: 16/07/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.89%

55th percentile - higher than 55% of all known CVEs

Summary

In SimpleChat prior to version 0.241.206, several plugin validation routes lacked enforcement of authentication and authorization at runtime. Routes such as POST /api/admin/plugins/test-instantiation, GET /api/admin/plugins/health-check/<plugin_name>, POST /api/admin/plugins/repair/<plugin_name>, and POST /api/plugins/validate were documented as requiring security but did not check if the user was logged in or had proper permissions. This allowed unauthenticated or unauthorized clients to invoke plugin validation, health check, and repair operations.

Risk Assessment

The organization is exposed to unauthorized plugin manipulations, which could lead to system integrity breaches, information leaks, or disruption of application functionality.

Recommendation

Immediately update SimpleChat to version 0.241.206 or later, which includes a fix enforcing authentication and authorization on the vulnerable routes.

Other vulnerabilities in SimpleChat

CVE-2026-57205Medium
In SimpleChat prior to version 0.241.203, the authenticated GET /api/user/info/<user_id> and GET /api/user/profile-image/<user_id> endpoints lacked object-level authorization. A low-privilege authenticated user could supply an arbitrary user_id and read the corresponding Cosmos DB user-settings document, retrieving another user's email address, display name, and profile image.

Original NVD description (English source)

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.241.206, several plugin validation routes in application/single_app/plugin_validation_endpoint.py, including `POST /api/admin/plugins/test-instantiation`, `GET /api/admin/plugins/health-check/<plugin_name>`, `POST /api/admin/plugins/repair/<plugin_name>`, and `POST /api/plugins/validate`, relied on @swagger_route(security=get_auth_security()) documentation without enforcing @login_required, @user_required, or @admin_required at runtime, allowing unauthenticated or unauthorized clients to invoke plugin validation, health, and repair behavior. This issue is fixed in version 0.241.206.