Overview: 1 vulnerability
| WSA |
Score |
Severity |
Issue |
Vulnerability type |
Scope |
Versions |
Fix |
Release date |
| WSA-2026-10 |
10.0 |
|
Authentication bypass in Relay plugin, protocols "api" and "weechat". |
Authentication Bypass Using an Alternate Path or Channel |
Relay |
4.3.0 → 4.9.3 |
4.9.4 |
|
WSA-2026-10: [Relay] Authentication bypass in Relay plugin, protocols "api" and "weechat".
Vulnerability
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
(
detail)
Authentication Bypass Using an Alternate Path or Channel
(
detail)
Affected versions
4.3.0 → 4.9.3
Description
A malicious client could authenticate on the relay, with protocol "api" or "weechat", without giving the password configured in WeeChat.
Mitigation
There are multiple ways to mitigate this issue:
- Remove all relays with protocol "api" or "weechat", see:
/help relay
- Unload relay plugin with command:
/plugin unload relay and see: /help weechat.plugin.autoload
- Secure relay to allow only trusted IP addresses, see:
/help relay.network.allowed_ips
Credit
The issue was discovered by Mohammed Arib.