CVE-2025-31596

Summary

CVE-2025-31596 is a Missing Authorization vulnerability affecting Chatwee's Chat product, version 1 through 2.1.3. This issue arises due to incorrectly configured access control security levels, enabling attackers to exploit the vulnerability and gain unauthorized access to affected chats. The consequence of this vulnerability could lead to serious data breaches or unintended modifications, posing a significant risk to organizations using Chatwee's Chat solution. It is essential for users to update to the latest version and properly configure access control settings to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.