CVE-2026-63765
🟡 Monitoruj
Obejście uwierzytelnienia w Chatwoot pozwala nieautoryzowanym atakującym tworzyć dowolne obiekty ActiveStorage.
CVSS
8.2
EPSS
0.7%
Exploit
none
Vendor
Opis źródłowy (NVD)
Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads controller that allows unauthenticated attackers to create arbitrary ActiveStorage blobs in any tenant account. Attackers can exploit missing authentication checks to resolve any account and conversation, then obtain signed PUT URLs to write arbitrary data to the application's storage backend.
auth-bypass
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 8.2 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 0.7% |
| Opublikowano (NVD) | 2026-07-23 19:17:03 UTC |
| Ostatnia modyfikacja (NVD) | 2026-09-17 18:16:57 UTC |
Referencje
- https://github.com/chatwoot/chatwoot/commit/8dd0d08322edafaec24624b72ed2f6045921cb7b ([email protected])
- https://github.com/chatwoot/chatwoot/issues/15072 ([email protected])
- https://github.com/chatwoot/chatwoot/pull/15039 ([email protected])
- https://github.com/chatwoot/chatwoot/releases/tag/v4.16.0 ([email protected])
- https://www.vulncheck.com/advisories/chatwoot-unauthenticated-activestorage-direct-upload-arbitrary-blob-creation ([email protected])