CVE-2026-124027: ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage

Published Nov 6, 2026

Updated

ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows unauthenticated attackers to read other tenants' documents. Attackers can enumerate sequential adminuserid and file id query parameters, bypassing the ownership check, to retrieve PDF-rendered pages of any tenant's knowledge-base documents.

Event History

Nov 6, 2026

CVE Published

via MITRE·07:14 PM

Data Sourced

via MITRE·07:14 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

ChatWiki versions before 2.10.0 are affected. The issue impacts knowledge-base documents belonging to other tenants.

What does an attacker need to exploit this issue?

No authentication is required. An attacker can enumerate sequential admin_user_id and file id query parameters to bypass the ownership check and retrieve PDF-rendered document pages.

How can defenders look for attempted exploitation?

Review requests to GET /manage/getLibRawFileOnePage for repeated or sequential admin_user_id and file id values, particularly requests made without an authenticated session. Such patterns may indicate enumeration of other tenants' documents.

CVE-2026-124027: ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage

Event History

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to exploit this issue?

How can defenders look for attempted exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to exploit this issue?

How can defenders look for attempted exploitation?