CNNVD-202601-4273 Information

Jan 24, 2026 cve

CNNVD ID

CNNVD-202601-4273

CVE-2026-24399

CNNVD Published: 2026-01-24

Description (Chinese)

ChatterMate是Runix个人开发者的一个AI聊天代理软件。 ChatterMate 1.0.8及之前版本存在跨站脚本漏洞，该漏洞源于处理聊天输入时未对HTML/JavaScript有效载荷进行过滤，可能导致客户端注入攻击。

Description (English)

ChatterMate is an AI chat agent for Runix personal developers. ChatterMate 1.0.8 and previous versions have a cross-site script loophole, which results from non-filtering of HTML/JavaScript payloads while processing chat input, which may lead to an injection attack on the client.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

个人开发者

Published

2026-01-24

Last Modified

2026-02-24

References

https://github.com/chattermate/chattermate.chat/commit/ff3398031abb97ae28546eaf993fed3619eaffdd https://github.com/chattermate/chattermate.chat/releases/tag/v1.0.9 https://github.com/chattermate/chattermate.chat/security/advisories/GHSA-72p3-w95w-q3j4 https://access.redhat.com/security/cve/cve-2026-24399

Patch

https://github.com/chattermate/chattermate.chat/releases

Share on: