CVE-2026-4765 is a stored Cross-Site Scripting (XSS) vulnerability in the RD Station Conversas chat application caused by improper sanitization of the 'name' parameter during initialization. This flaw allows arbitrary JavaScript execution within the application context, affecting not only the attacker but also support agents who join the conversation. No patch or official remediation guidance is currently available. The severity is assessed as medium based on the impact described.