Stored Cross-Site Scripting in Cheshire Cat AI Core's Uploads Plugin
CVE-2026-108725

5.1MEDIUM

Key Information:

Vendor

Cheshire-cat-ai

Status
Core
Vendor
CVE Published:
11 October 2026

What is CVE-2026-108725?

The Cheshire Cat AI Core, specifically up to version 2.0.23, suffers from a stored cross-site scripting vulnerability in its uploads plugin. This flaw allows authenticated users to upload HTML files through a POST request to the '/uploads' endpoint without proper file type restrictions. Malicious actors can exploit this by sending crafted URLs to signed-in users, which executes scripts using their access_token cookie. This exposes all authenticated users, including administrators, to potential attacks leveraging their session credentials.

Affected Version(s)

core 0 <= 2.0.23

References

https://hackmd.io/@haind03/cheshire-cat-uploads-stored-ht...
third-party-advisory
https://github.com/cheshire-cat-ai/core/blob/c22731e7009a...
technical-description
https://github.com/cheshire-cat-ai/core
product

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HaiND from the Post and Telecommunication Institute of Technology
.