https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T00:19:48.778788+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111706 fkie_cve-2026-111706 2026-10-20T00:19:48.792092+00:00

99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email fields to download xlsx files containing usernames, emails, prompts, and AI answers.

 https://db.gcve.eu/vuln/ghsa-q472-g8p5-86fq GHSA-q472-g8p5-86fq 2026-10-20T00:19:48.792196+00:00

99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email fields to download xlsx files containing usernames, emails, prompts, and AI answers.