This vulnerability (CVE-2026-49082) affects Chatway Live Chat versions up to 1.4.8 and involves the exposure of sensitive subscriber data by inserting it into sent data streams. It is categorized as CWE-201, indicating that sensitive information is improperly included in data transmissions. The CVSS v3.1 base score is 7.4, reflecting a high severity with network attack vector, low attack complexity, required privileges, no user interaction, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

The vulnerability allows an attacker with low complexity and some privileges to cause sensitive subscriber data to be included in sent data, potentially leading to information disclosure and partial compromise of data integrity and availability. This could impact confidentiality of subscriber information and disrupt service operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is provided, users should monitor vendor communications for updates. Until a patch is available, limit privileges where possible to reduce risk.