CVE-2026-111618

CoAI Chat Nio through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated...

CVE-2026-111618

CoAI (Chat Nio) versions up to and including 4.0.0 are vulnerable to an unauthenticated path traversal vulnerability. The flaw exists in the generation and article archive download endpoints due to improper handling of the hash query parameter . Attackers can exploit this by supplying ../ sequenc...

EUVD-2026-103040

CoAI Chat Nio through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated...

PT-2026-116017

CoAI Chat Nio through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated...

EUVD-2025-137069

Malicious code in imodiov-kugfi-coai npm...

coai-jrc.de Cross Site Scripting vulnerability OBB-3925723

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

coai-jrc.de Cross Site Scripting vulnerability OBB-3836562

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...