Executive brief
RackTables is a web-based data center asset management system used to track and manage IT infrastructure. An authenticated attacker can perform unauthorized actions on behalf of a logged-in administrator—such as modifying infrastructure configurations or asset reservations—through a cross-site request forgery attack, because the application does not validate anti-CSRF tokens on state-changing operations.
Technical details
RackTables fails to implement CSRF protection mechanisms on form submissions and AJAX operations that modify application state. The vulnerability exists in the dispatcher and form generation logic, allowing an attacker to craft malicious requests (e.g., POST to index.php?module=ajax&ac=upd-reservation-port) that are accepted without a valid anti-CSRF token. An attack requires the victim to be authenticated to RackTables; the attacker exploits the authenticated session by tricking the user into visiting a malicious page while logged in. The vulnerability has been publicly disclosed with proof-of-concept code, and the project maintainer acknowledged the lack of CSRF protection but offered no timeline for fixes.
Affected products
- RackTables RackTables up to 0.22.0
Timeline
- 2026-08-04: disclosed