Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2026-105797: SimpleChat lets low‑privilege users run any command
CVE-2026-105797 · published 29 days ago
Summary
In SimpleChat versions 0.261.003 and 0.261.027, a mistake in the order of permission checks lets a signed‑in user with limited rights start an operating‑system program while the application is running. This can expose or change the service's secret data and may interrupt the service. Update to version 0.261.031 or later to fix the problem.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | simplechat | < 0.261.031 |
Original advisory text
SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport)
SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027, an authorization ordering flaw in POST /api/user/plugins allows an authenticated low-privileged user to omit the top-level MCP type so that _reject_non_admin_mcp_stdio skips inspection before the type is restored from metadata. The stored personal action can then reach McpPluginFactory.create_connector, and MCPStdioPlugin.connect starts the attacker-selected operating-system process under the application service identity when the action tool is invoked. Exploitation requires personal plugins to be enabled and governance to permit MCP actions, and it can expose or modify secrets and data available to the service or disrupt the service. This issue is fixed in version 0.261.031.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-1057... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-105797 Vendor Advisory
- https://github.com/microsoft/simplechat/commit/73ff7d6998dc4827a0f6ba002386275a7... Patch
- https://github.com/microsoft/simplechat/security/advisories/GHSA-h4mw-qw8m-5x4j Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-78OS Command Injection
CWE-863Incorrect Authorization
Timeline
Published6 Oct 2026
Updated4 Nov 2026
First seen6 Oct 2026
Sources
CVE-2026-105797 · NVD
CVE-2026-105797 · MITRE
CVE-2026-105797 · OSV
GHSA-h4mw-qw8m-5x4j · GHSA
Track software like this
Free during beta