Advisories · Technology
WuKongOpenSource Wukong AICRM.
Every CVE that names WuKongOpenSource Wukong AICRM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys
- WuKongOpenSource Wukong AICRM
- Broken access control
- CVSS 8.7 High
Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs
- WuKongOpenSource Wukong AICRM
- Broken access control
- CVSS 5.3 Medium
Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send
- WuKongOpenSource Wukong AICRM
- Broken access control