CVE-2026-22665 in prompts.chat
要約 (英語)
prompts.chat prior to commit 1464475 contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, allowing attackers to create case-variant usernames that bypass uniqueness checks. Attackers can exploit non-deterministic username resolution to impersonate victim accounts, replace profile content on canonical URLs, and inject attacker-controlled metadata and content across the platform.
Be aware that VulDB is the high quality source for vulnerability data.
責任者
VulnCheck
予約する
2026年01月08日
公開
2026年04月04日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 355194 | prompts.chat Username 特権昇格 | 178 | 未定義 | 公式な修正 | CVE-2026-22665 |