Zammad — Rce (CVE-2026-34724)
Date: 2026-04
Affected: zammad/zammad
Attack vector: rce
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2026-34724
CWE: CWE-1336
CWE-94
CVSS: 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a server-side template injection vulnerability which leads to RCE via AI Agent exists. Impact is limited to environments where an attacker can control or influence type_enrichment_data (typically high-privilege administrative configuration). This vulnerability is fixed in 7.0.1.


Mitigations:

Architectural layers (MAESTRO):