Vulnerability · Published Jul 16, 2026 · Assigned by VulnCheck

CVE-2025-71377stoatchat before 20250210-1 Unrestricted Message History Fetch

High 8.7

In plain English

A high-severity security flaw in stoatchat from stoatchat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).

Severity (CVSS 4.0)8.7High

Exploit odds (30 days)0.7%top 48.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. When fetching messages 'nearby' another message, the database query can be given a message limit of zero, which the database interprets as 'no limit'. A remote unauthenticated attacker can craft nearby message fetch requests to download an entire channel's message history in a single expensive request, and can send many such requests in parallel, resulting in denial of service through resource exhaustion.

Affected products (as reported)

Vendor	Product	Versions
stoatchat	stoatchat	0 – before 0.8.2

Weakness: CWE-1025 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

GitHub Security Advisory (GHSA-h7h6-7pxm-mc66) vendor-advisory
https://github.com/stoatchat/stoatchat/commit/5f84daa9dba34c103cd83a2ee1f5e5ba900bfe94 patch
VulnCheck Advisory: stoatchat before 20250210-1 Unrestricted Message History Fetch third-party-advisory