---
id: CVE-2026-119048
title: JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module
summary: >-
  JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference
  vulnerability in the AI CMS chat module that allows authenticated users to
  access other users' conversations due to missing and reversed ownership
  checks. Attacke…
severity: medium
cvss: 4.2
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-639
vendor: thinkgem
product: JeeSite
affected:
  - JeeSite >= 5.11.0 <= 5.19.1
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-29T15:30:16.499790Z'
published: '2026-10-29'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T17:20:03.681Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-119048'
references:
  - url: 'https://github.com/thinkgem/jeesite5/issues/43'
    label: 'GitHub Issue #43'
  - url: 'https://github.com/thinkgem/jeesite5'
  - url: >-
      https://github.com/thinkgem/jeesite5/commit/cbc5ba7a37fd93f38c46ef656bd31442fe6f8015
  - url: >-
      https://github.com/thinkgem/jeesite5/blob/5b5e2cf0adc45a1abe33d0f4ca149590d149b82d/modules/ai/ai-cms/src/main/java/com/jeesite/modules/ai/cms/service/CacheChatMemoryRepository.java#L59-L62
  - url: >-
      https://github.com/thinkgem/jeesite5/blob/5b5e2cf0adc45a1abe33d0f4ca149590d149b82d/modules/ai/ai-cms/src/main/java/com/jeesite/modules/ai/cms/service/AiCmsChatService.java#L111-L116
  - url: 'https://hackmd.io/@hieund/jeesite5-ai-cms-chat-conversation-idor'
  - url: >-
      https://www.vulncheck.com/advisories/jeesite-5.11.0-through-5.19.1-idor-in-ai-cms-chat-module
    label: >-
      VulnCheck Advisory: JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat
      Module
tags:
  - cve.org
epss: 0.0027
epssPercentile: 0.19335
ingestedAt: '2026-11-01T22:02:40.986Z'
---

## Overview

JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call /a/cms/chat/message, /a/cms/chat/delete, or /a/cms/chat/completions to read, delete, or append to the victim's AI chat transcripts.

## Affected

- `JeeSite >= 5.11.0 <= 5.19.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.