[CVE-2026-80462] A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthent…

Descripción técnica

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

Puntuación CVSS

Score: 10/10 — Severidad: CRITICAL — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Debilidades (CWE)

CWE-306

Fuente oficial

Publicado en NIST NVD.