CyberRota Analysis
AI-GeneratedAuthenticated users with agent permissions in Zammad prior to version 7.1.2 can exploit the ticket summarize endpoint to access arbitrary AI analytics run identifiers, potentially revealing sensitive error messages related to unauthorized tickets. While the impact is limited to the disclosure of error strings and does not expose ticket content, organizations using Zammad should prioritize updating to version 7.1.2 to mitigate this vulnerability. This is particularly relevant for customer support teams that rely on the platform for handling sensitive information.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, an authenticated user with agent permissions can supply an arbitrary AI analytics run identifier to the ticket summarize endpoint and receive the AI provider error message stored for that run, even if the run belongs to a ticket the agent is not authorized to access. The disclosure is limited to the provider error string; ticket content is not exposed. This issue is fixed in version 7.1.2.