CVE-2026-57205 - SimpleChat: Authenticated users can access other users' profile metadata through user IDOR endpoints

CVE ID :CVE-2026-57205 Published : July 16, 2026, 3:12 p. m. | 1 hour, 4 minutes ago Description :SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions.

Prior to 0. 241. 203, the authenticated GET /api/user/info/ and GET /api/user/profile-image/ endpoints in application/single_app/route_backend_users.