EdgeChat vulnerabilities

CVEs whose affected-version data names the EdgeChat package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-123206Low· 3.7PoC

yesterday

EdgeChat before 2.20.3 Missing Authentication for Attachment Download via GET /files/:key

EdgeChat before 2.20.3 contains a missing authentication vulnerability in the GET /files/:key route that allows unauthenticated or banned users to download decrypted public-channel attachments because canAccessFile() accepts a null user …

▾ Twilightaozorae · EdgeChatvia CVEORG