ChatWiki up to version 2.9.6 has an insecure direct object reference flaw that lets anyone who can log in to the system supply arbitrary form_id values to endpoints that manage form filters. The flaw allows an attacker to read the filter rules of another tenant by calling getFormFilterList and getFormFilterInfo and to overwrite the ordering of that tenant’s filter list with updateFormFilterSort. The impact is thus the confidential disclosure of filter logic and the ability to modify another tenant’s configuration without authorization.

The vulnerability affects the zhimaAi ChatWiki product, specifically all releases through version 2.9.6. No other variants or downstream forks were documented in the advisory.

The CVSS score of 5.3 indicates a moderate severity, and the absence of an EPSS rating means the current exploitation risk is not quantified. The flaw requires an authenticated session, so an attacker must first gain legitimate credentials or compromise an existing user; the attack vector, however, is limited to the user’s tenant context, meaning the damage is confined to other tenants’ form filters. The vulnerability is not listed in the CISA KEV catalog, indicating that no confirmed widespread exploitation has been reported yet.