CVE-2026-108689— Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send
Quick assessment
Affected
WuKongOpenSource Wukong AICRM
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
悟空 AICRM（截至版本号 20260610）存在一个授权缺失漏洞，允许已认证的用户通过向 POST /chat/send 接口提供任意 sessionId，写入其他用户的 AI 聊天会话。攻击者可以向受害者的对话中追加消息，并接收基于受害者最近 20 条消息生成的助手回复流，从而泄露对话内容。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1530 · Data from Cloud Storage
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-108689
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send
Source: CVE Program / CVE List V5
Vulnerability Description
Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write into other users' AI chat sessions by supplying an arbitrary sessionId to POST /chat/send. Attackers can append messages to a victim's conversation and receive streamed assistant replies built from the victim's last 20 messages, disclosing conversation content.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WuKongOpenSource | Wukong AICRM | 0 ~ 20260610 | - |
|
II. Public POCs for CVE-2026-108689
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-108689
请登录查看更多情报信息。
Other References for CVE-2026-108689 (3)
Same Patch Batch · WuKongOpenSource · 2026-10-11 · 3 CVEs total
| CVE-2026-108707 | 9.8 CRITICAL | Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect |
| CVE-2026-108708 | 8.8 HIGH | Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUti |
IV. Related Vulnerabilities
Same vendor: WuKongOpenSource
-
CVE-2026-108707
Wukong_HRM through commit 186115e Authentication Bypass via -
CVE-2026-108708
Wukong_HRM through commit 186115e Missing Authorization via -
CVE-2026-2141
WuKongOpenSource WukongCRM URL PermissionServiceImpl.java im -
CVE-2025-8852
WuKongOpenSource WukongCRM API Response upload information e -
CVE-2025-6106
WuKongOpenSource WukongCRM AdminRoleController.java cross-si
Same weakness: CWE-639
-
CVE-2026-108696
CoreShop through 1.5.5 Authorization Bypass via OrderControl -
CVE-2026-108704
CordysCRM through 1.9.3 Authorization Bypass via Follow-Up R -
CVE-2026-108672
JeecgBoot through 3.9.5 Authorization Bypass via /airag/vide -
CVE-2026-108642
JeecgBoot through 3.9.5 IDOR via PUT /sys/sysAnnouncementSen -
CVE-2026-108641
JeecgBoot through 3.9.5 IDOR via /sys/sysAnnouncementSend/ge
V. Comments for CVE-2026-108689
No comments yet