CyberSecBulletin

zhimaAi vulnerabilities

We track 1 vulnerability in zhimaAi products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest zhimaAi vulnerabilities

  • 7.5 High severity

    chatwiki: Missing Authentication for Critical Functionality

    CVE-2026-124027zhimaAiEPSS 1.46%

    ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows unauthenticated attackers to read other tenants' documents. Attackers can enumerate sequential admin_user_id and file id query para