CERT24CVE-2026-118129 — improper authentication in jeremyckahn Chitchatter PostMessage Bootstrap.tsx isConfigMessageEventLoading data…
CERT24Threat Observatory
Period

CVE-2026-118129 — improper authentication in jeremyckahn Chitchatter PostMessage Bootstrap.tsx isConfigMessageEvent

Authentication in the isConfigMessageEvent function in src/Bootstrap.tsx, part of Chitchatter's PostMessage Handler component, can be affected by manipulating the parentDomain argument. The source states that remote exploitation is possible and that an exploit has been made public.

← Back to intelligence

CVE-2026-118129 — improper authentication in jeremyckahn Chitchatter PostMessage Bootstrap.tsx isConfigMessageEvent

Authentication in the isConfigMessageEvent function in src/Bootstrap.tsx, part of Chitchatter's PostMessage Handler component, can be affected by manipulating the parentDomain argument. The source states that remote exploitation is possible and that an exploit has been made public.