← Database

CVE-2026-80462

CRITICAL CVSS: 10.0 Published: 2026-09-11 Modified: 2026-09-11

Description

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

Affected Platforms

Unknown

Weakness Type

CWE-306

References