Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:cheshire_cat_ai:cheshire_cat_ai:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Authentication Bypass in Cheshire Cat AI via Custom Auth Handler

An unauthenticated remote code execution vulnerability in Cheshire Cat AI version 1.9.2 and earlier stems from improper validation of the user_id argument within the custom authentication handler.

Cheshire Cat AI vulnerability authentication-bypass webserver
1t 1c