An information disclosure flaw exists in the /api/v1/user/info API endpoint of AgentChat v2.3.0. Unauthenticated callers can enumerate user IDs and retrieve sensitive data, including SHA‑256 password hashes. The vulnerability allows a remote actor to obtain confidential user credentials without authentication, posing a risk to user account security and potentially enabling credential reuse attacks.

The affected product is AgentChat, version 2.3.0. No vendor or sub‑product information is listed beyond the product name; any deployment using this version is at risk.

The EPSS score is 0.00023 (just below 1%) and the vulnerability is not listed in CISA KEV, indicating no known exploitation activity to date. However, the attack vector is inferred to be unauthenticated HTTP requests to a public API endpoint, which means any host exposing the API is fully exposed. The CVSS score is 7.5, indicating high severity, and raw password hashes directly impact confidentiality. Given that the flaw does not require privileged access, the likelihood for adversaries remains high if the API is reachable over the network.