← Back

CVE-2026-29198

nvd nist
Published: Apr 23, 2026Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulnerability can lead to account takeover of the first user with a generated token when an OAuth app is configured.

Affected (12)

Rocket.chat
1 product
Rocket.chat
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Rocket.chat
Rocket.chat
Before 7.10.9
Rocket.chat
From 7.11.0 to 7.11.6
Rocket.chat
From 7.12.0 to 7.12.6
Rocket.chat
From 7.13.0 to 7.13.5
Rocket.chat
From 8.0.0 to 8.0.3
Rocket.chat
From 8.1.0 to 8.1.2
Rocket.chat
From 8.2.0 to 8.2.1
Rocket.chat
Version 8.3.0 rc0
Rocket.chat
Version 8.3.0 rc1
Rocket.chat
Version 8.3.0 rc2
Rocket.chat
Version 8.3.0 rc3
Rocket.chat
Version 8.3.0 rc4

Related CWEs

CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

References (2)

Source: support@hackerone.com
Issue TrackingPatch
Source: support@hackerone.com
Third Party Advisory

Timeline

No history available yet.