Vulnerability · Published Oct 29, 2026 · Assigned by VulnCheck

CVE-2026-119048JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module

Medium 4.2

In plain English

A medium-severity authorization bypass via user-controlled key in JeeSite from thinkgem. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).

Severity (CVSS 3.1)4.2Medium

Exploit odds (30 days)0.3%top 80.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call /a/cms/chat/message, /a/cms/chat/delete, or /a/cms/chat/completions to read, delete, or append to the victim's AI chat transcripts.

Affected products (as reported)

Vendor	Product	Versions
thinkgem	JeeSite	5.11.0 – through 5.19.1

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

References

GitHub Issue #43 issue-tracking
https://github.com/thinkgem/jeesite5 product
https://github.com/thinkgem/jeesite5/commit/cbc5ba7a37fd93f38c46ef656bd31442fe6f8015 patch
https://github.com/thinkgem/jeesite5/blob/5b5e2cf0adc45a1abe33d0f4ca149590d149b82d/modules/ai/ai-cms/src/main/java/com/jeesite/modules/ai/cms/service/CacheChatMemoryRepository.java#L59-L62 technical-description
https://github.com/thinkgem/jeesite5/blob/5b5e2cf0adc45a1abe33d0f4ca149590d149b82d/modules/ai/ai-cms/src/main/java/com/jeesite/modules/ai/cms/service/AiCmsChatService.java#L111-L116 technical-description
https://hackmd.io/@hieund/jeesite5-ai-cms-chat-conversation-idor technical-description
VulnCheck Advisory: JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module third-party-advisory