CVE-2026-73059: stoatchat before 0.15.0 Permission Bypass via message_fetch
stoatchat before 0.15.0 contains a permission bypass vulnerability in the messagefetch route that checks only ViewChannel permission instead of requiring ReadMessageHistory. Attackers with ViewChannel access but ReadMessageHistory denied can retrieve individual message content by ID, bypassing the intended history restriction enforced by bulk read routes.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
stoatchatto a version that resolves this vulnerability.Fixed in 0.15.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73059?
CVE-2026-73059 has a medium severity rating of 6.5.
What does CVE-2026-73059 affect?
CVE-2026-73059 affects stoatchat versions before 0.15.0.
How do I fix CVE-2026-73059?
To fix CVE-2026-73059, upgrade stoatchat to version 0.15.0 or later.
What type of vulnerability is CVE-2026-73059?
CVE-2026-73059 is a permission bypass vulnerability.
What can an attacker do with CVE-2026-73059?
An attacker can retrieve individual message content by ID if they have ViewChannel access without ReadMessageHistory permission.