CVE-2026-84462 Zammad: AI Agent template sanitizer bypass leads to remote code execution
Administrators can bypass AI Agent sanitization to execute arbitrary commands on the server, compromising all stored data.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-84462?
CVE-2026-84462 is a high-severity code injection vulnerability in zammad, published on 25 Sep 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a security filter that protects Zammad's AI Agent configuration can be bypassed by entering specially crafted text into one of an AI Agent's fields. An administrator with permission to create or edit AI Agents could exploit this to run arbitrary commands on the server that hosts Zammad, potentially reading, modifying, or destroying all data stored on that server. No interaction from other users is needed; the malicious code runs automatically the next time the affected AI Agent processes a ticket. This issue is fixed in version 7.1.2.
Which versions are affected by CVE-2026-84462?
How do I fix CVE-2026-84462?
No fix has been published for CVE-2026-84462 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-84462 being exploited?
There is no known exploitation of CVE-2026-84462 in the wild and no public exploit code.
Sources
Also known as GHSA-gp3x-9xm8-rcj6.