medium5.3
CVE-2026-111618
CoAI (Chat Nio) through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash qu…
Impact
CoAI (Chat Nio) through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated archives.
Affected products
| Product | Affected versions |
|---|---|
| CoAI (Chat Nio) | through 4.0.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/coaidev/coai/blob/v4.0.0/addition/article/api.go#L25-L35
- https://github.com/coaidev/coai/blob/v4.0.0/addition/generation/api.go#L19-L29
- https://hackmd.io/@hieuPenguinnn/coai-chatnio-generation-article-download-path-traversal
- https://www.vulncheck.com/advisories/coai-through-4.0.0-unauthenticated-path-traversal-via-archive-download-endpoints