CVE-2026-72719 in Chatwoot
الملخص
بحسب MITRE • 10/08/2026
Chatwoot is a customer engagement suite. Prior to 4.9.0, Chatwoot allowed authenticated account administrators to transfer Portals, Automation Rules, Macros, and Twilio Channels to other accounts through the writable account_id parameter. This could break tenant isolation and cause cross-account data exposure, unauthorized configuration changes, or loss of access to transferred resources. This issue is fixed in version 4.9.0.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.