| 标题 | zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Unauthenticated Channel Credential Injection |
|---|
| 描述 | The POST /api/channels endpoint in chatgpt-on-wechat v2.0.4 Web Console allows an unauthenticated remote attacker to:
1.Inject arbitrary channel credentials (Feishu App Secret, DingTalk Client Secret, WeCom Secret, QQ App Secret, WeChat MP App Secret, AES Keys, Verification Tokens) into the application's config.json via the save action.
2.Activate new messaging channels and start network services on the server (binding to attacker-specified ports) via the connect action.
Both actions persist changes to disk and require zero authentication. This is a distinct vulnerability from the known /config POST endpoint (which writes to a different set of keys like open_ai_api_key and model).
|
|---|
| 来源 | ⚠️ https://github.com/zhayujie/chatgpt-on-wechat/issues/2742 |
|---|
| 用户 | York Shen (UID 97025) |
|---|
| 提交 | 2026-04-02 10時06分 (6 月前) |
|---|
| 管理 | 2026-04-12 06時27分 (10 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 356990 [zhayujie chatgpt-on-wechat CowAgent 2.0.4 Administrative HTTP Endpoint 弱身份验证] |
|---|
| 积分 | 0 |
|---|