CVE-2026-34724

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-34724

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34724.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-34724

Aliases

GHSA-fg9w-jg8f-4j94

Published

2026-04-08T18:17:30.178Z

Modified

2026-07-08T08:12:52.619854304Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSS Calculator

Summary

Zammad has a server-side template injection leading to RCE via AI Agent

Details

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a server-side template injection vulnerability which leads to RCE via AI Agent exists. Impact is limited to environments where an attacker can control or influence typeenrichmentdata (typically high-privilege administrative configuration). This vulnerability is fixed in 7.0.1.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34724.json",
    "cwe_ids": [
        "CWE-1336",
        "CWE-94"
    ],
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/zammad/zammad

Affected ranges

Type

GIT

Repo

https://github.com/zammad/zammad

Events

Introduced

f3228274c4feefac470d7efad12f240debd678bc

Fixed

6a5ac49588022c610896a50516dc5876ac1f24b9

Database specific

{
    "cpe": "cpe:2.3:a:zammad:zammad:7.0.0:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ],
    "extracted_events": [
        {
            "introduced": "7.0.0"
        },
        {
            "fixed": "7.0.1"
        },
        {
            "last_affected": "7.0.0"
        }
    ]
}

Affected versions

7.*

7.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-34724.json"