CVE-2026-120425
mediumChatify before 1.6.4 contains an authorization bypass vulnerability in the Pusher channel authorization endpoint that allows authenticated users to subscribe t…
Chatify before 1.6.4 contains an authorization bypass vulnerability in the Pusher channel authorization endpoint that allows authenticated users to subscribe to other users' private channels by supplying arbitrary channel names. Attackers can request a signature for private-chatify. via POST /chat/auth to receive the victim's incoming private messages and attachments in real time.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/munafio/chatify/blob/v1.6.3/src/ChatifyMessenger.php#L101-L124 disclosure@vulncheck.com
- https://github.com/munafio/chatify/commit/e16bdb197d227aa2a66863c166bbb31c5f45bc2a disclosure@vulncheck.com
- https://github.com/munafio/chatify/issues/412 disclosure@vulncheck.com
- https://github.com/munafio/chatify/releases/tag/v1.6.4 disclosure@vulncheck.com
- https://hackmd.io/@hieund/chatify-pusher-channel-authorization-bypass disclosure@vulncheck.com
- https://www.vulncheck.com/advisories/chatify-before-1.6.4-pusher-authorization-bypass-via-... disclosure@vulncheck.com
- https://hackmd.io/@hieund/cve-2026-120425-chatify-pusher-channel-authorization-bypass 134c704f-9b21-4f2e-91b3-4a467353bcc0