← Database

CVE-2026-36719

HIGH CVSS: 7.5 Published: 2026-06-09 Modified: 2026-07-23

Description

An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated attackers to obtain sensitive information, including SHA256 password hashes, via enumerating user IDs.

Affected Platforms

Unknown

Weakness Type

CWE-200

References