PT-2026-25771

CVE-2026-4251

Published

2026-03-16

Updated

2026-03-16

Description by

CVSS 3.1

2.5

Low

MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CityData CityChat versions prior to 0.12.7

Description An issue exists in the ai.citydata.citychat component within the file 'resources/assets/flutter assets/assets/credentials.json'. A manipulation of this file can lead to the unprotected storage of credentials. This attack requires local access and is characterized by high complexity, making exploitation difficult.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Researchers

Fxizenta

Vuldb

Vendors

Affected products

Weakness enumeration

CWE-256: Plaintext Storage of a Password

CWE-255

Related identifiers