CVE-2026-56730
Received Received - Intake

Authorization Bypass in Zammad Knowledge Base Access

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: GitHub, Inc.

Description
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, an authorization bypass vulnerability was found that allows an authenticated agent to read knowledge base answer content they should not be able to access. The vulnerable GraphQL mutation is meant to transform a knowledge base answer suggestion so it can be inserted into the ticket editor, but it only checks if the user has the ticket.agent permission. Checking the authorization to the knowledge base answer itself is missing. This vulnerability is fixed in 7.0.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-26
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-56730
EUVD
EUVD-2026-87218

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
zammad zammad to 7.0.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Zammad is a helpdesk system with a flaw in versions before 7.0.2. An authenticated agent can bypass authorization to read knowledge base answers they should not access. The issue is in a GraphQL mutation meant for transforming answer suggestions, which only checks for ticket.agent permission without verifying access rights to the knowledge base answer itself.

Detection Guidance

To detect this vulnerability, check if your Zammad instance is running a version prior to 7.0.2. Use commands like 'zammad version' or inspect the web interface for version details. Verify if agents can access knowledge base answers they should not be able to access by testing access controls.

Impact Analysis

If you are an agent using Zammad versions before 7.0.2, you could access restricted knowledge base answers. This may expose sensitive information intended only for specific teams or roles. The impact is limited to read-only access to unauthorized content.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) or HIPAA (health information privacy) by exposing confidential information. Organizations using affected versions must update to mitigate compliance risks.

Mitigation Strategies

Upgrade Zammad to version 7.0.2 or later immediately. This version includes the fix for the authorization bypass vulnerability. Ensure no unauthorized access has occurred by reviewing agent permissions and knowledge base access logs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-56730. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart