CVE-2026-111707: 99AI through 4.3.0 IDOR via /api/chatLog/querySingleChat Chat Message Disclosure
99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read other users' chat messages because querySingleChat lacks an owner check. Attackers can send a fingerprint header to obtain a visitor JWT and iterate sequential chatId values to retrieve other users' message content and task data.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Unauthenticated remote attackers can exploit it. They can send a fingerprint header to obtain a visitor JWT, so no pre-existing user account or privileges are required.
What information can be exposed?
An attacker can retrieve other users' chat message content and task data through the chat-log query endpoint.
How is data from other users accessed?
The vulnerable query does not enforce an ownership check. An attacker can iterate sequential chatId values to request chat records belonging to other users.
Are deployments affected by default?
The available information identifies the issue in 99AI through version 4.3.0, but does not state whether any configuration change is required or whether the affected endpoint is enabled in every deployment.
What can be checked to identify exposure?
Review requests to /api/chatLog/querySingleChat for sequential or unusual chatId enumeration, particularly requests using visitor JWTs obtained with fingerprint headers. The provided data does not specify log fields or detection signatures beyond those request characteristics.