The vulnerability is an insecure direct object reference that allows any authenticated user of a tenant to modify the fast command records of other tenants by supplying arbitrary sequential command IDs to the POST /manage/saveFastCommand endpoint. By altering a target tenant's command title, type, content and robot binding, an attacker can redirect webpage‑jump commands to malicious URLs or reassign the command record to their own tenant, thereby manipulating application behavior across tenants and undermining tenant isolation. This flaw directly impacts data integrity and the security boundaries between tenants.

The flaw is present in zhimaAi ChatWiki versions before 2.10.0, with a documented case in 2.9.6. Any deployment of ChatWiki older than the 2.10.0 release, regardless of patch status, is vulnerable. The vulnerable code lives in manage/fast_command.go and can be identified by the commit that introduced the insecure ID handling.

The CVSS score of 5.3 denotes moderate severity. No EPSS data provides an estimation of exploitation likelihood, and the vulnerability is not listed in CISA KEV. The attack vector is an authenticated user with tenant access who supplies a command ID belonging to another tenant. Exploitation requires knowledge of valid sequential IDs but does not require elevated privileges or external access. The risk is moderate, yet the potential impact on tenant isolation and the ability to redirect traffic to attacker‑controlled URLs is significant.