99AI vulnerabilities

1 known vulnerability in 99AI from Vastxie. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  99AI: Missing Authentication for Critical Functionality

  CVE-2026-111706Oct 16, 2026Vastxie

  99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email field