CVE-2026-108725

Name of the Vulnerable Software and Affected Versions Cheshire Cat AI core versions prior to 2.0.24

Description A stored cross-site scripting issue exists in the uploads plugin. Authenticated users can upload HTML files via the 'POST /uploads' endpoint because there are no file type restrictions. An attacker can then provide the public 'GET /uploads/{path}' URL to a signed-in user, which executes a script in the application origin using the victim's access token cookie, potentially affecting administrators.

Recommendations Update Cheshire Cat AI core to version 2.0.24 or later. Restrict the use of the 'POST /uploads' endpoint to prevent the upload of HTML files as a temporary mitigation.