CVE-2026-102489

Summary

Zammad versions 6.3.0 to 6.5.4 and 7.0.0 to 7.1.3 are vulnerable to a session hijack that can lead to remote code execution as the zammad user, with versions 7.0.0 to 7.1.3 not being fully exploitable due to environment conditions.

Exploitability

Exploitation is difficult due to the need for session hijacking, which requires the attacker to first gain access to a session token. The vulnerability is not fully exploitable in versions 7.0.0 to 7.1.3 due to environment conditions.

Blast radius

If exploited, the vulnerability could allow an attacker to execute arbitrary code as the zammad user, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Zammad version 6.5.5 or later, or apply the relevant security patches provided by the vendor.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.