CVE-2026-35023

Wimi Teamwork On-Premises < 8.2.0 IDOR via preview.php

Published Apr 8, 2026 CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Description

Wimi Teamwork On-Premises versions prior to 8.2.0 contain an insecure direct object reference vulnerability in the preview.php endpoint where the item_id parameter lacks proper authorization checks. Attackers can enumerate sequential item_id values to access and retrieve image previews from other users' private or group conversations, resulting in unauthorized disclosure of sensitive information.

Analysis

Technical impact

Wimi Teamwork On‑Premises versions earlier than 8.2.0 contain an insecure direct object reference in the preview.php endpoint. The item_id parameter is not verified for proper authorization, allowing an attacker to enumerate sequential identifiers and retrieve image previews from private or group conversations. The unintended disclosure of user‑contributed images results in access to confidential or personal data that belongs to other users.

Affected Systems

Cloud Solutions SAS’s Wimi Teamwork On‑Premises installations running any version prior to 8.2.0 are affected. The vulnerability exists wherever preview.php is exposed, and any user who can supply an item_id value will be able to trigger the IDOR behavior.

Risk and Exploitability

The assigned CVSS v3 base score of 5.3 reflects moderate severity. No EPSS data is available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote, through the web interface, and the flaw requires only enumeration of predictable item_id values—an action that can be automated once the attacker has network or web access to the application.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cloud Solutions SAS

Wimi Teamwork

unaffected

Version	Status	Constraints
`0`	affected	< 8.2.0

Configuration 1 [-]

cpe:2.3:a:wimi-teamwork:wimi-teamwork:*:*:*:*:on-premises:*:*:*

No data.

Vendor Product Versions

Cloud Solutions

Wimi Teamwork

Version	Status	Scheme	Platform
`[0,8.2.0)`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Verify the installed version of Wimi Teamwork On‑Premises and confirm it is version 8.2.0 or higher.
Upgrade the software to the latest secure release if the current version is below 8.2.0.
If an immediate upgrade is not possible, restrict or disable direct access to preview.php and enforce proper authorization checks for the item_id parameter.
Monitor application logs for unauthorized attempts to access preview.php and review user privileges regularly.

Generated by OpenCVE AI on April 8, 2026 at 15:05 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.182% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://www.vulncheck.com/advisories/wimi-teamwork-on-premises-idor-via-preview-php
https://www.wimi-teamwork.com/en/product-update

History

Jun 2, 2026 6:00 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Wimi-teamwork Wimi-teamwork wimi-teamwork
CPEs		cpe:2.3:a:wimi-teamwork:wimi-teamwork:::::on-premises:::*
Vendors & Products		Wimi-teamwork Wimi-teamwork wimi-teamwork

Apr 9, 2026 6:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}`

Apr 8, 2026 7:30 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cloud Solutions Cloud Solutions wimi Teamwork
Vendors & Products		Cloud Solutions Cloud Solutions wimi Teamwork

Apr 8, 2026 3:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Apr 8, 2026 1:45 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Wimi Teamwork On-Premises versions prior to 8.2.0 contain an insecure direct object reference vulnerability in the preview.php endpoint where the item_id parameter lacks proper authorization checks. Attackers can enumerate sequential item_id values to access and retrieve image previews from other users' private or group conversations, resulting in unauthorized disclosure of sensitive information.
Title		Wimi Teamwork On-Premises < 8.2.0 IDOR via preview.php
Weaknesses		CWE-639
References		https://www.vulncheck.com/advisories/wimi-teamwork-on-premises-idor-via-preview-php https://www.wimi-teamwork.com/en/product-update
Metrics		cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}`