CVE-2026-63307: Ottermind CHAT2DB

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/{id} endpoint. The handler calls dataSourceService.queryExistent(id, ...) without an ownership check and returns the decrypted password field, allowing any authenticated non-admin user to enumerate datasource IDs and read the plaintext database credentials of datasources owned by other users.

Affected products

• Ottermind CHAT2DB: before 5.3.0 (fixed in 5.3.0)

Published 2026-07-17. Last modified 2026-07-23.