Vulnerability Description
SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.241.203, the authenticated GET /api/user/info/<user_id> and GET /api/user/profile-image/<user_id> endpoints in application/single_app/route_backend_users.py accepted a caller-supplied user_id and read the matching Cosmos DB user-settings document without object-level authorization, allowing a low-privilege authenticated user to retrieve another user's email address, display name, and profile image. This issue is fixed in version 0.241.203.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/microsoft/simplechat/blob/main/docs/explanation/fixes/USER_PR
- https://github.com/microsoft/simplechat/releases/tag/v0.250.001
- https://github.com/microsoft/simplechat/security/advisories/GHSA-x2jq-2m5m-65m4
FAQ
What is CVE-2026-57205?
CVE-2026-57205 is a vulnerability with a CVSS score of 4.3 (MEDIUM). SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.241.203, the authenticated GET /api/user/info/<user_id> and GET /ap...
How severe is CVE-2026-57205?
CVE-2026-57205 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-57205?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.