CVE-2026-100677 | stoatchat up to 0.15.4 Login Endpoint /api/auth/session/login information disclosure

September 26, 2026 Yanac

A vulnerability classified as problematic was found in stoatchat up to 0.15.4. This affects an unknown function of the file /api/auth/session/login of the component Login Endpoint. Executing a manipulation can lead to information disclosure.

The identification of this vulnerability is CVE-2026-100677. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More