CyberSecBulletin

Cheshire-cat-ai vulnerabilities

We track 1 vulnerability in Cheshire-cat-ai products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2026.

1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score

Latest Cheshire-cat-ai vulnerabilities

  • 7.3 High severity

    Cheshire Cat AI: Improper Authentication

    CVE-2026-90579Cheshire-cat-ai

    A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function _authorize_http_key of the file core/cat/factory/custom_auth_handler.py. The manipulation of the argument user_id leads to missing authentication. The atta