CVE-2025-51862

Insecure Direct Object Reference (IDOR) vulnerability in TelegAI (telegai.com) thru 2025-05-26 in its chat component. An attacker can exploit this IDOR to tamper other users' conversation. Additionally, malicious contents and XSS payloads can be injected, leading to phishing attack, user spoofing and account hijacking via XSS.

• CWE-79

• https://github.com/Secsys-FDU/CVE-2025-51862

Published

Jul 22, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-51850Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: non…
• CVE-2025-51857The reconcile method in the AttachmentReconciler class of th…6.1
• CVE-2025-51858Self Cross-Site Scripting (XSS) vulnerability in ChatPlaygro…6.1
• CVE-2025-51859Stored Cross-Site Scripting (XSS) vulnerability in Chaindesk…6.5
• CVE-2025-5186A vulnerability was found in thinkgem JeeSite up to 5.11.1. …8.8
• CVE-2025-51860Stored Cross-Site Scripting (XSS) in TelegAI (telegai.com) 2…6.1
• CVE-2025-51863Self Cross Site Scripting (XSS) vulnerability in ChatGPT Unl…6.1
• CVE-2025-51864A reflected cross-site scripting (XSS) vulnerability exists …6.5
• CVE-2025-51865Ai2 playground web service (playground.allenai.org) LLM chat…8.8
• CVE-2025-51867Insecure Direct Object Reference (IDOR) vulnerability in Dee…6.5
• CVE-2025-51868Insecure Direct Object Reference (IDOR) vulnerability in Dip…7.5
• CVE-2025-51869Insecure Direct Object Reference (IDOR) vulnerability in Lin…7.5