CVE-2026-123197

A flaw was found in wppconnect-server due to missing authentication on static file endpoints. An unauthenticated remote attacker can exploit this issue by enumerating timestamp-based file paths in requests to retrieve decrypted sticker media across sessions. This allows unauthorized access to...