PT-2025-42449 · Chatluck · Chatluck

Published 2025-10-16 · Updated 2025-10-16 · CVE-2025-54461

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ChatLuck (affected versions not specified)

Description The software exhibits an issue with access control related to the invitation of guest users. An uninvited guest user may be able to register as a guest user if the issue is successfully exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-1220

Related Identifiers

CVE-2025-54461

Affected Products

Chatluck

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-54461 · Security Note
• https://t.me/CVEtracker/35071 · Telegram Post
• https://twitter.com/CVEnew/status/1978926619533148271 · Twitter Post
• https://chatluck.com/support/package/mainte/pchatluck-%e8%a3%bd%e5%93%81%e3%81%ab%e3%81%8a%e3%81%91%e3%82%8b%e3%80%81%e8%a4%87%e6%95%b0%e3%81%ae%e3%82%bb%e3%82%ad%e3%83%a5%e3%83%aa%e3%83%86%e3%82%a3%e4%b8%8a%e3%81%ae%e5%95%8f%e9%a1%8c%e3%81%ab · Note
• https://jvn.jp/en/jp/JVN13030751 · Note