CVE-2026-123624

ChatWiki versions prior to 2.10.0 are susceptible to an insecure direct object reference (IDOR) vulnerability. This flaw allows authenticated users to modify fast commands belonging to other tenants by providing arbitrary sequential IDs to the POST /manage/saveFastCommand endpoint. An attacker ca...