Threat database

Cheshire Cat AI core versions up to 2.0.23 have a stored cross-site scripting (XSS) vulnerability in the uploads plugin. Authenticated users can upload HTML files without type restrictions via POST /uploads. This allows attackers to craft URLs that execute scripts in the application origin when visited by signed-in users, potentially exposing their access_token cookies, including those of administrators.

CVE-2026-90579 is a medium severity vulnerability in Cheshire Cat AI versions 1.9.0, 1.9.1, and 1.9.2. It involves missing authentication in the _authorize_http_key function within the custom_auth_handler.py file, allowing remote attackers to manipulate the user_id argument to bypass authentication. The vulnerability has been publicly disclosed, but no patch or vendor response is currently available.

Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the collection using the offset cursor.