Oct8ne Chatbot CVE-2025-10869

Exploitation requires the attacker to inject a payload during creation of a chat transcript through the /Data/SaveInteractions interaction endpoint of Oct8ne Chatbot v2.3; the stored script only executes when a victim (agent or user) subsequently opens the transcript delivered by email (UI:P is the key limiting factor). Impact is confined to the victim's browser session (session cookie theft, actions on behalf of the victim) and does not compromise the chatbot server itself. Realistic risk is further bounded by whether transcript creation is reachable by unauthenticated visitors or requires an established chat session/account, which the available data does not confirm.

This is a medium-severity stored XSS (CVSS 4.0 base 5.3, CWE-79) that should be treated as a moderate, not urgent, priority. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:P) indicates a network-reachable, low-complexity, unauthenticated injection, but exploitation is gated on victim interaction (UI:P) - the payload only fires when a victim opens the emailed transcript - and impact is limited to subsequent-system confidentiality and integrity (SC:L/SI:L) with no impact on the vulnerable chatbot system itself (VC/VI/VA:N). All exploitation signals point low: EPSS is 0.24% (13th percentile), there is no CISA KEV listing, and no public exploit code is referenced. No SSVC decision data was provided in the input. The one notable amplifier is that the flaw is stored/persistent and the delivery channel is email, which can reach victims outside the application context. Net assessment: a genuine but contained client-side vulnerability - real enough to patch on a normal cycle, not a drop-everything emergency. Note a mild tension worth verifying with the vendor: the input CVSS 4.0 assigns PR:N (no privileges), yet the mechanism requires an attacker to 'create a transcript,' which in many deployments may require at least an active chat session or account - confirm whether transcript creation is truly open to fully unauthenticated actors.

An attacker initiates or manipulates an Oct8ne chat session and injects a malicious JavaScript payload that is persisted via the /Data/SaveInteractions endpoint. When the chat transcript is later generated and emailed, a support agent or user opens it and the stored script executes in their browser, enabling theft of session cookies or actions performed on the victim's behalf. No public exploit code is identified at time of analysis, and execution depends on the victim opening the transcript (UI:P).