CVE-2026-118691 | GuDong2003 xianyu-auto-reply-fix up to 2.0.7 Message Endpoint api_key/cookie_id/chat_id/to_user_id/message improper authorization

October 29, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in GuDong2003 xianyu-auto-reply-fix up to 2.0.7. This vulnerability affects unknown code of the component Message Endpoint. This manipulation of the argument api_key/cookie_id/chat_id/to_user_id/message causes improper authorization.

This vulnerability appears as CVE-2026-118691. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More