AIKIDO-2026-571219

chat is vulnerable to Missing Authorization

Pre-CVE Published 4 days ago

CVE Score

Medium

Missing Authorization

TL;DR

Before the fix, requestApproval from chat/workflow accepted the approval decision and the deciding user from the JSON body POSTed to its workflow webhook, so anyone holding the webhook URL could forge an approve or deny decision and impersonate an allowed approvers entry. Apps that never call requestApproval were unaffected because the function must be used explicitly inside a "use workflow" function. The fix stores a single-use receipt in the thread's state adapter when Chat SDK verifies a real button click and resolves the decision and user only from that receipt, ignoring POSTs without one. The fix also requires the click-handling Chat instance and the workflow runner to share a state adapter.

How do I fix this?

Upgrade the chat package to 4.44.0 or later and Pass a thread created by Chat SDK whose state adapter is shared with the workflow runner.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and call requestApproval from chat/workflow where anyone holding its workflow webhook URL can POST to it.