{"schema_version":1,"title":"Rocket.Chat vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 24 vulnerabilities in Rocket.Chat: 0 in the last 7 days and 4 in the last 90 days, 5 of them critical and 0 exploited in the wild. The most recent, CVE-2026-75575, was published on 25 August 2026.","url":"https://junglewise.ai/threats/technologies/rocket-chat","json_url":"https://junglewise.ai/threats/technologies/rocket-chat.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/rocket-chat","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":6,"all_time":24,"critical":5,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":4,"last_365_days":22},"latest":[{"cve":"CVE-2026-75575","cvss":5.3,"epss":0.004,"slug":"cve-2026-75575-rocket-chat-sendforgotpasswordemail-method-missing-ddp-rate-limit","title":"Rocket.Chat sendForgotPasswordEmail method missing DDP rate limit","severity":"medium","exploited":false,"published_at":"2026-08-25T02:16:51.457+00:00","url":"https://junglewise.ai/threats/cve-2026-75575-rocket-chat-sendforgotpasswordemail-method-missing-ddp-rate-limit"},{"cve":"CVE-2026-65645","cvss":4.3,"epss":0.0034,"slug":"cve-2026-65645-rocket-chat-meteor-ddp-method-authorization-bypass","title":"Rocket.Chat Meteor DDP method authorization bypass","severity":"medium","exploited":false,"published_at":"2026-08-21T04:18:14.69+00:00","url":"https://junglewise.ai/threats/cve-2026-65645-rocket-chat-meteor-ddp-method-authorization-bypass"},{"cve":"CVE-2026-65644","cvss":7.5,"epss":0.0048,"slug":"cve-2026-65644-rocket-chat-omnichannel-queue-stored-xss-via-visitor-name","title":"Rocket.Chat Omnichannel queue stored XSS via visitor name","severity":"high","exploited":false,"published_at":"2026-08-21T04:18:13.78+00:00","url":"https://junglewise.ai/threats/cve-2026-65644-rocket-chat-omnichannel-queue-stored-xss-via-visitor-name"},{"cve":"CVE-2026-58066","cvss":9.8,"slug":"cve-2026-58066-rocket-chat-authentication-bypass-in-saml-sso","title":"Rocket.Chat authentication bypass in SAML SSO","severity":"critical","exploited":false,"published_at":"2026-07-30T06:25:55.54+00:00","url":"https://junglewise.ai/threats/cve-2026-58066-rocket-chat-authentication-bypass-in-saml-sso"},{"cve":"CVE-2026-55762","cvss":8.1,"slug":"cve-2026-55762-rocket-chat-missing-authorization-in-fingerprint-rest-endpoint","title":"Rocket.Chat missing authorization in fingerprint REST endpoint","severity":"high","exploited":false,"published_at":"2026-06-24T22:16:49.667+00:00","url":"https://junglewise.ai/threats/cve-2026-55762-rocket-chat-missing-authorization-in-fingerprint-rest-endpoint"},{"cve":"CVE-2026-55759","cvss":7.4,"slug":"cve-2026-55759-rocket-chat-authentication-bypass-via-apple-sign-in-token-replay","title":"Rocket.Chat authentication bypass via Apple Sign-In token replay","severity":"high","exploited":false,"published_at":"2026-06-24T22:16:49.527+00:00","url":"https://junglewise.ai/threats/cve-2026-55759-rocket-chat-authentication-bypass-via-apple-sign-in-token-replay"},{"cve":"CVE-2026-55666","cvss":9.3,"slug":"cve-2026-55666-rocket-chat-account-takeover-via-apple-oauth-login-handler","title":"Rocket.Chat account takeover via Apple OAuth login handler","severity":"info","exploited":false,"published_at":"2026-06-24T22:16:49.393+00:00","url":"https://junglewise.ai/threats/cve-2026-55666-rocket-chat-account-takeover-via-apple-oauth-login-handler"},{"cve":"CVE-2026-49278","cvss":6.7,"slug":"cve-2026-49278-rocket-chat-token-disclosure-and-visitor-impersonation-in","title":"Rocket.Chat token disclosure and visitor impersonation in visitors.info","severity":"medium","exploited":false,"published_at":"2026-06-24T21:16:54.757+00:00","url":"https://junglewise.ai/threats/cve-2026-49278-rocket-chat-token-disclosure-and-visitor-impersonation-in"},{"cve":"CVE-2026-49277","cvss":2.3,"slug":"cve-2026-49277-rocket-chat-oauth-token-persistence-after-account-deactivation","title":"Rocket.Chat OAuth token persistence after account deactivation","severity":"info","exploited":false,"published_at":"2026-06-24T21:16:54.6+00:00","url":"https://junglewise.ai/threats/cve-2026-49277-rocket-chat-oauth-token-persistence-after-account-deactivation"},{"cve":"CVE-2026-47733","cvss":4.4,"slug":"cve-2026-47733-rocket-chat-xss-in-imageelement-component-via-markdown-images","title":"Rocket.Chat XSS in ImageElement component via markdown images","severity":"medium","exploited":false,"published_at":"2026-06-24T21:16:54.477+00:00","url":"https://junglewise.ai/threats/cve-2026-47733-rocket-chat-xss-in-imageelement-component-via-markdown-images"},{"cve":"CVE-2026-46423","cvss":9.3,"slug":"cve-2026-46423-rocket-chat-authentication-bypass-in-saml-signature-validation","title":"Rocket.Chat authentication bypass in SAML signature validation","severity":"info","exploited":false,"published_at":"2026-06-24T21:16:54.223+00:00","url":"https://junglewise.ai/threats/cve-2026-46423-rocket-chat-authentication-bypass-in-saml-signature-validation"},{"cve":"CVE-2026-45757","cvss":2.3,"slug":"cve-2026-45757-rocket-chat-insufficient-session-expiration-in-idle-deactivation","title":"Rocket.Chat insufficient session expiration in idle deactivation","severity":"info","exploited":false,"published_at":"2026-06-24T21:16:54.097+00:00","url":"https://junglewise.ai/threats/cve-2026-45757-rocket-chat-insufficient-session-expiration-in-idle-deactivation"},{"cve":"CVE-2026-45689","cvss":9.1,"slug":"cve-2026-45689-rocketchat-rocket-chat-nosql-injection-in-oauth2-token-endpoint","title":"RocketChat Rocket.Chat NoSQL injection in OAuth2 token endpoint","severity":"critical","exploited":false,"published_at":"2026-06-24T21:16:53.97+00:00","url":"https://junglewise.ai/threats/cve-2026-45689-rocketchat-rocket-chat-nosql-injection-in-oauth2-token-endpoint"},{"cve":"CVE-2026-45688","cvss":9.1,"slug":"cve-2026-45688-rocket-chat-nosql-injection-in-cas-login-handler","title":"Rocket.Chat NoSQL injection in CAS login handler","severity":"critical","exploited":false,"published_at":"2026-06-24T21:16:53.847+00:00","url":"https://junglewise.ai/threats/cve-2026-45688-rocket-chat-nosql-injection-in-cas-login-handler"},{"cve":"CVE-2026-45687","cvss":8.5,"slug":"cve-2026-45687-rocket-chat-mass-assignment-in-sendfilemessage-allows-data-export","title":"Rocket.Chat mass assignment in sendFileMessage allows data export theft","severity":"high","exploited":false,"published_at":"2026-06-24T21:16:53.72+00:00","url":"https://junglewise.ai/threats/cve-2026-45687-rocket-chat-mass-assignment-in-sendfilemessage-allows-data-export"},{"cve":"CVE-2026-45677","cvss":8.7,"slug":"cve-2026-45677-rocket-chat-missing-saml-signature-verification-in-logoutrequest","title":"Rocket.Chat missing SAML signature verification in LogoutRequest","severity":"info","exploited":false,"published_at":"2026-06-24T21:16:53.59+00:00","url":"https://junglewise.ai/threats/cve-2026-45677-rocket-chat-missing-saml-signature-verification-in-logoutrequest"},{"cve":"CVE-2026-48929","cvss":7.5,"epss":0.0064,"slug":"cve-2026-48929-rocket-chat-unauthenticated-file-deletion-in-deletefilemessage","title":"Rocket.Chat unauthenticated file deletion in deleteFileMessage","severity":"high","exploited":false,"published_at":"2026-06-17T13:20:44.55+00:00","url":"https://junglewise.ai/threats/cve-2026-48929-rocket-chat-unauthenticated-file-deletion-in-deletefilemessage"},{"cve":"CVE-2026-48616","cvss":9.3,"epss":0.0028,"slug":"cve-2026-48616-rocket-chat-improper-access-control-in-livechat-file-downloads","title":"Rocket.Chat improper access control in Livechat file downloads","severity":"critical","exploited":false,"published_at":"2026-06-17T13:20:42.6+00:00","url":"https://junglewise.ai/threats/cve-2026-48616-rocket-chat-improper-access-control-in-livechat-file-downloads"},{"cve":"CVE-2026-32995","cvss":7.5,"slug":"cve-2026-32995-rocket-chat-improper-access-control-in-autotranslate","title":"Rocket.Chat improper access control in autoTranslate.translateMessage","severity":"high","exploited":false,"published_at":"2026-05-28T05:16:35.477+00:00","url":"https://junglewise.ai/threats/cve-2026-32995-rocket-chat-improper-access-control-in-autotranslate"},{"cve":"CVE-2026-32994","cvss":5.3,"slug":"cve-2026-32994-rocket-chat-improper-access-control-in-autotranslate-api","title":"Rocket.Chat improper access control in autotranslate API","severity":"medium","exploited":false,"published_at":"2026-05-19T05:16:23.787+00:00","url":"https://junglewise.ai/threats/cve-2026-32994-rocket-chat-improper-access-control-in-autotranslate-api"},{"cve":"CVE-2026-29198","cvss":9.8,"slug":"cve-2026-29198-rocket-chat-nosql-injection-in-oauth-token-handling","title":"Rocket.Chat NoSQL injection in OAuth token handling","severity":"critical","exploited":false,"published_at":"2026-04-23T00:16:45.06+00:00","url":"https://junglewise.ai/threats/cve-2026-29198-rocket-chat-nosql-injection-in-oauth-token-handling"},{"cve":"CVE-2026-22560","cvss":5.3,"slug":"cve-2026-22560-rocket-chat-open-redirect-in-saml-slo-endpoint","title":"Rocket.Chat open redirect in SAML SLO endpoint","severity":"medium","exploited":false,"published_at":"2026-04-10T17:17:01.98+00:00","url":"https://junglewise.ai/threats/cve-2026-22560-rocket-chat-open-redirect-in-saml-slo-endpoint"},{"cve":"CVE-2024-46935","cvss":3.1,"epss":0.0059,"slug":"cve-2024-46935-rocket-chat-message-parser-denial-of-service","title":"Rocket.Chat message parser denial of service","severity":"low","exploited":false,"published_at":"2024-09-25T03:30:36+00:00","url":"https://junglewise.ai/threats/cve-2024-46935-rocket-chat-message-parser-denial-of-service"},{"cve":"CVE-2024-39713","cvss":3.1,"epss":0.032,"slug":"cve-2024-39713-rocket-chat-server-side-request-forgery-in-twilio-webhook","title":"Rocket.Chat Server-Side Request Forgery in Twilio webhook","severity":"low","exploited":false,"published_at":"2024-08-05T06:30:36+00:00","url":"https://junglewise.ai/threats/cve-2024-39713-rocket-chat-server-side-request-forgery-in-twilio-webhook"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Rocket.Chat","slug":"rocket-chat","vendor":{"name":"Rocket.chat","slug":"rocket-chat","url":"https://junglewise.ai/threats/vendors/rocket-chat"},"aliases":[],"category":"web-application","homepage":"https://rocket.chat/","repo_url":"https://github.com/RocketChat/Rocket.Chat","description":"An open-source communications platform that includes team chat, video conferencing, and file sharing.","url":"https://junglewise.ai/threats/technologies/rocket-chat"},"most_severe":[{"cve":"CVE-2026-58066","cvss":9.8,"slug":"cve-2026-58066-rocket-chat-authentication-bypass-in-saml-sso","title":"Rocket.Chat authentication bypass in SAML SSO","severity":"critical","exploited":false,"published_at":"2026-07-30T06:25:55.54+00:00","url":"https://junglewise.ai/threats/cve-2026-58066-rocket-chat-authentication-bypass-in-saml-sso"},{"cve":"CVE-2026-29198","cvss":9.8,"slug":"cve-2026-29198-rocket-chat-nosql-injection-in-oauth-token-handling","title":"Rocket.Chat NoSQL injection in OAuth token handling","severity":"critical","exploited":false,"published_at":"2026-04-23T00:16:45.06+00:00","url":"https://junglewise.ai/threats/cve-2026-29198-rocket-chat-nosql-injection-in-oauth-token-handling"},{"cve":"CVE-2026-48616","cvss":9.3,"epss":0.0028,"slug":"cve-2026-48616-rocket-chat-improper-access-control-in-livechat-file-downloads","title":"Rocket.Chat improper access control in Livechat file downloads","severity":"critical","exploited":false,"published_at":"2026-06-17T13:20:42.6+00:00","url":"https://junglewise.ai/threats/cve-2026-48616-rocket-chat-improper-access-control-in-livechat-file-downloads"},{"cve":"CVE-2026-45689","cvss":9.1,"slug":"cve-2026-45689-rocketchat-rocket-chat-nosql-injection-in-oauth2-token-endpoint","title":"RocketChat Rocket.Chat NoSQL injection in OAuth2 token endpoint","severity":"critical","exploited":false,"published_at":"2026-06-24T21:16:53.97+00:00","url":"https://junglewise.ai/threats/cve-2026-45689-rocketchat-rocket-chat-nosql-injection-in-oauth2-token-endpoint"},{"cve":"CVE-2026-45688","cvss":9.1,"slug":"cve-2026-45688-rocket-chat-nosql-injection-in-cas-login-handler","title":"Rocket.Chat NoSQL injection in CAS login handler","severity":"critical","exploited":false,"published_at":"2026-06-24T21:16:53.847+00:00","url":"https://junglewise.ai/threats/cve-2026-45688-rocket-chat-nosql-injection-in-cas-login-handler"},{"cve":"CVE-2026-45687","cvss":8.5,"slug":"cve-2026-45687-rocket-chat-mass-assignment-in-sendfilemessage-allows-data-export","title":"Rocket.Chat mass assignment in sendFileMessage allows data export theft","severity":"high","exploited":false,"published_at":"2026-06-24T21:16:53.72+00:00","url":"https://junglewise.ai/threats/cve-2026-45687-rocket-chat-mass-assignment-in-sendfilemessage-allows-data-export"},{"cve":"CVE-2026-55762","cvss":8.1,"slug":"cve-2026-55762-rocket-chat-missing-authorization-in-fingerprint-rest-endpoint","title":"Rocket.Chat missing authorization in fingerprint REST endpoint","severity":"high","exploited":false,"published_at":"2026-06-24T22:16:49.667+00:00","url":"https://junglewise.ai/threats/cve-2026-55762-rocket-chat-missing-authorization-in-fingerprint-rest-endpoint"},{"cve":"CVE-2026-48929","cvss":7.5,"epss":0.0064,"slug":"cve-2026-48929-rocket-chat-unauthenticated-file-deletion-in-deletefilemessage","title":"Rocket.Chat unauthenticated file deletion in deleteFileMessage","severity":"high","exploited":false,"published_at":"2026-06-17T13:20:44.55+00:00","url":"https://junglewise.ai/threats/cve-2026-48929-rocket-chat-unauthenticated-file-deletion-in-deletefilemessage"},{"cve":"CVE-2026-65644","cvss":7.5,"epss":0.0048,"slug":"cve-2026-65644-rocket-chat-omnichannel-queue-stored-xss-via-visitor-name","title":"Rocket.Chat Omnichannel queue stored XSS via visitor name","severity":"high","exploited":false,"published_at":"2026-08-21T04:18:13.78+00:00","url":"https://junglewise.ai/threats/cve-2026-65644-rocket-chat-omnichannel-queue-stored-xss-via-visitor-name"},{"cve":"CVE-2026-32995","cvss":7.5,"slug":"cve-2026-32995-rocket-chat-improper-access-control-in-autotranslate","title":"Rocket.Chat improper access control in autoTranslate.translateMessage","severity":"high","exploited":false,"published_at":"2026-05-28T05:16:35.477+00:00","url":"https://junglewise.ai/threats/cve-2026-32995-rocket-chat-improper-access-control-in-autotranslate"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}