chatbot-ui vulnerabilities

CVEs whose affected-version data names the chatbot-ui package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85693Medium· 6.5

2w ago

Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers to access private file content belonging to other users by supplying arbitrary file UUIDs

Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers to access private file content belonging to other users by supplying arbitrary file UUIDs. The endpoint uses a servic…

▾ Sunlitmckaywrigley · chatbot-uiEPSS 0.25%via NVD