WuKongOpenSource vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20254
3. 20266

Newest CVEs

• CVE-2026-110208

  Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys

  WuKongOpenSource · Wukong AICRM

  High7.1
• CVE-2026-110207

  Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs

  WuKongOpenSource · Wukong AICRM

  High8.7
• CVE-2026-108708

  Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil

  WuKongOpenSource · Wukong_HRM

  High8.7
• CVE-2026-108707

  Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect

  WuKongOpenSource · Wukong_HRM

  Critical9.3
• CVE-2026-108689

  Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send

  WuKongOpenSource · Wukong AICRM

  Medium5.3
• CVE-2026-2141

  WuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorization

  WuKongOpenSource · WukongCRM

  Medium5.3
• CVE-2025-8852

  WuKongOpenSource WukongCRM API Response upload information exposure

  WuKongOpenSource · WukongCRM

  Medium5.3
• CVE-2025-6106

  WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery

  WuKongOpenSource · WukongCRM

  Medium5.3
• CVE-2025-5879

  WuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scripting

  WuKongOpenSource · WukongCRM

  Medium5.1
• CVE-2025-5521

  WuKongOpenSource WukongCRM updataPassword cross-site request forgery

  WuKongOpenSource · WukongCRM

  Medium5.3