Synology Chat Server CVE-2026-40541

Requires (1) a valid authenticated Synology Chat account on the target server (CVSS PR:L - low privilege but not anonymous), and (2) a victim UI interaction in the Chat web interface (CVSS UI:R), meaning a logged-in user must view/click the malicious content for the script to fire. The vulnerable code path is the 'extract domain' input-neutralization logic in Synology Chat Server versions prior to 2.4.5-22148. Limiting factors: exploitation is impossible without an account and without a second authenticated victim's interaction, so a fully unauthenticated or non-interactive attack is not supported by the data; impact scope extends into DSM because of the scope-change (S:C) relationship between the Chat package and its host OS.

The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H = 9.0) indicates network reachability, low complexity, low-privilege authentication, and required user interaction, with full confidentiality/integrity/availability impact amplified by a scope change into DSM. Two signals temper the raw score: exploitation requires an already-authenticated account (PR:L) AND a victim UI interaction (UI:R), so this is not a mass-automatable, drive-by threat. EPSS and SSVC data were not provided in the input, and there is no KEV listing or POC signal, so real-world exploitation appears speculative rather than demonstrated. Net: treat as a genuine high-severity issue for internet-exposed or multi-user Chat deployments because of the DSM file read/write pivot, but the PR:L + UI:R prerequisites make targeted (social-engineering) abuse more realistic than opportunistic worming. The 'read/write arbitrary files via an XSS' impact chain is unusual - verify the exact DSM impact with the Synology advisory rather than assuming full host compromise from the CWE alone.

An attacker who holds (or registers/obtains) a low-privilege Synology Chat account posts content containing a crafted payload in the vulnerable 'extract domain' path; when a logged-in victim interacts with it in the Chat UI, injected script runs in the victim's authenticated DSM session and abuses that context to read or write files on the DiskStation or crash the service. No public exploit code is identified at time of analysis, and the AC:L/UI:R profile means the technical trigger is simple but still depends on convincing a victim to interact.