What’s Vulnerable › Products

WuKongOpenSource Wukong AICRM vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your WuKongOpenSource Wukong AICRM version is affected

Latest WuKongOpenSource Wukong AICRM vulnerabilities

• CVE-2026-110208 — Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys (CVSS 7.1)
• CVE-2026-110207 — Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs (CVSS 8.8)
• CVE-2026-108689 — Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send (CVSS 5.4)