CVE-2026-119048
JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module
CVSS Score
4.2
EPSS Score
0.0%
EPSS Percentile
0th
JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call /a/cms/chat/message, /a/cms/chat/delete, or /a/cms/chat/completions to read, delete, or append to the victim's AI chat transcripts.
| CWE | CWE-639 |
| Vendor | thinkgem |
| Product | jeesite |
| Published | Oct 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for thinkgem jeesite
Be the first to know when new medium vulnerabilities affecting thinkgem jeesite are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
thinkgem / JeeSite
5.11.0 ≤ 5.19.1
References
github.com: https://github.com/thinkgem/jeesite5/issues/43 github.com: https://github.com/thinkgem/jeesite5 github.com: https://github.com/thinkgem/jeesite5/commit/cbc5ba7a37fd93f38c46ef656bd31442fe6f8015 github.com: https://github.com/thinkgem/jeesite5/blob/5b5e2cf0adc45a1abe33d0f4ca149590d149b82d/modules/ai/ai-cms/src/main/java/com/jeesite/modules/ai/cms/service/CacheChatMemoryRepository.java#L59-L62 github.com: https://github.com/thinkgem/jeesite5/blob/5b5e2cf0adc45a1abe33d0f4ca149590d149b82d/modules/ai/ai-cms/src/main/java/com/jeesite/modules/ai/cms/service/AiCmsChatService.java#L111-L116 hackmd.io: https://hackmd.io/@hieund/jeesite5-ai-cms-chat-conversation-idor vulncheck.com: https://www.vulncheck.com/advisories/jeesite-5.11.0-through-5.19.1-idor-in-ai-cms-chat-module
Credits
hieuPenguinnn ThinkGem