EUVD-2026-54078

OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the authentication middleware in the Express route handler...

CVE-2026-53977

OpenChamber 1.11.7 contains an unauthenticated DoS vulnerability via POST to /api/system/shutdown, triggered because the shutdown route is registered before authentication middleware in bootstrap-runtime.js. This allows remote attackers to terminate the server process and disrupt all active AI co...