CVE-2026-36719

Summary

An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated attackers to obtain sensitive information, including SHA256 password hashes, via enumerating user IDs.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://github.com/CC-T-454455/Vulnerabilities/tree/master/agent-chat/vulnerability-3

References

• https://github.com/CC-T-454455/Vulnerabilities/tree/master/agent-chat/vulnerability-3

• ←Previous
• Next→