CVE-2025-50735

A directory traversal vulnerability exists in NextChat versions through 2.16.0 . The flaw is caused by the WebDAV proxy failing to canonicalize or reject dot path segments within its catch-all route. This oversight allows an attacker to access sensitive information via both authenticated and anon...