Chatwoot before version 4.17.0 contains an authorization flaw that permits an authenticated agent bot to specify a foreign inbox source_id and access data across accounts. By calling the conversation creation endpoint with another account’s source ID, a malicious actor can create or retrieve conversations and post messages to that account’s contacts. This flaw enables unauthorized access to sensitive communication data within other client accounts and is an example of improper authorization (CWE‑639).

The vulnerability affects installations of Chatwoot, any version prior to 4.17.0, including the chatwoot:chatwoot product. Attack capability is tied to authenticated agents within those environments.

The CVSS score of 2.3 indicates low overall severity; the EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog. Exploitation requires an authenticated agent bot with knowledge of another account’s source_id, limiting the threat to users that manage multiple accounts or provide bot services. The risk is therefore moderate in environments where such credentials exist but the exploitability is low due to the need for valid authentication and source_id information.