CVE-2026-124027 | zhimaAi ChatWiki up to 2.9.x Ownership Check getLibRawFileOnePage admin_user_id/file_id missing authentication

A vulnerability was found in zhimaAi ChatWiki up to 2.9.x. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /manage/getLibRawFileOnePage of the component Ownership Check. This manipulation of the argument admin_user_id/file_id causes missing authentication.

This vulnerability appears as CVE-2026-124027. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More