CVE-2026-55762

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-55762", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-17T14:34:51.880Z", "datePublished": "2026-06-24T21:08:01.271Z", "dateUpdated": "2026-06-25T12:34:32.535Z"}, "containers": {"cna": {"title": "Rocket.Chat: Any Authenticated User Can Permanently Deregister Workspace from Rocket.Chat Cloud via Unprotected `/api/v1/fingerprint` Endpoint", "problemTypes": [{"descriptions": [{"cweId": "CWE-862", "lang": "en", "description": "CWE-862: Missing Authorization", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/RocketChat/Rocket.Chat/security/advisories/GHSA-8hhc-j325-rxqp", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/RocketChat/Rocket.Chat/security/advisories/GHSA-8hhc-j325-rxqp"}], "affected": [{"vendor": "RocketChat", "product": "Rocket.Chat", "versions": [{"version": ">= 8.5.0-rc.0, < 8.5.1", "status": "affected"}, {"version": ">= 8.4.0-rc.0, < 8.4.4", "status": "affected"}, {"version": ">= 8.3.0-rc.0, < 8.3.6", "status": "affected"}, {"version": ">= 8.2.0-rc.0, < 8.2.6", "status": "affected"}, {"version": ">= 8.1.0-rc.0, < 8.1.6", "status": "affected"}, {"version": ">= 7.11.0-rc.0, < 8.0.7", "status": "affected"}, {"version": "< 7.10.13", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-24T21:08:01.271Z"}, "descriptions": [{"lang": "en", "value": "Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13, the POST /api/v1/fingerprint REST endpoint enforces authentication (authRequired: true) but performs no authorization check. Any authenticated user \u2014 including a standard user role account \u2014 can call this endpoint with {\"setDeploymentAs\": \"new-workspace\"} to permanently deregister the workspace from Rocket.Chat Cloud. This wipes all cloud credentials, removes the workspace license, breaks push notifications for all users, and requires manual re-registration to recover. This vulnerability is fixed in 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13."}], "source": {"advisory": "GHSA-8hhc-j325-rxqp", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-25T12:34:23.639307Z", "id": "CVE-2026-55762", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-25T12:34:32.535Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "Rocket.Chat: Any Authenticated User Can Permanently Deregister Workspace from Rocket.Chat Cloud via Unprotected `/api/v1/fingerprint` Endpoint", "source": {"advisory": "GHSA-8hhc-j325-rxqp", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "RocketChat", "product": "Rocket.Chat", "versions": [{"status": "affected", "version": ">= 8.5.0-rc.0, < 8.5.1"}, {"status": "affected", "version": ">= 8.4.0-rc.0, < 8.4.4"}, {"status": "affected", "version": ">= 8.3.0-rc.0, < 8.3.6"}, {"status": "affected", "version": ">= 8.2.0-rc.0, < 8.2.6"}, {"status": "affected", "version": ">= 8.1.0-rc.0, < 8.1.6"}, {"status": "affected", "version": ">= 7.11.0-rc.0, < 8.0.7"}, {"status": "affected", "version": "< 7.10.13"}]}], "references": [{"url": "https://github.com/RocketChat/Rocket.Chat/security/advisories/GHSA-8hhc-j325-rxqp", "name": "https://github.com/RocketChat/Rocket.Chat/security/advisories/GHSA-8hhc-j325-rxqp", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13, the POST /api/v1/fingerprint REST endpoint enforces authentication (authRequired: true) but performs no authorization check. Any authenticated user \u2014 including a standard user role account \u2014 can call this endpoint with {\"setDeploymentAs\": \"new-workspace\"} to permanently deregister the workspace from Rocket.Chat Cloud. This wipes all cloud credentials, removes the workspace license, breaks push notifications for all users, and requires manual re-registration to recover. This vulnerability is fixed in 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862: Missing Authorization"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-24T21:08:01.271Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-55762", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-25T12:34:23.639307Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-06-25T12:34:27.912Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-55762", "state": "PUBLISHED", "dateUpdated": "2026-06-24T21:08:01.271Z", "dateReserved": "2026-06-17T14:34:51.880Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-06-24T21:08:01.271Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Rocket.Chat", "vendor": "RocketChat", "versions": [{"status": "affected", "version": ">= 8.5.0-rc.0, < 8.5.1"}, {"status": "affected", "version": ">= 8.4.0-rc.0, < 8.4.4"}, {"status": "affected", "version": ">= 8.3.0-rc.0, < 8.3.6"}, {"status": "affected", "version": ">= 8.2.0-rc.0, < 8.2.6"}, {"status": "affected", "version": ">= 8.1.0-rc.0, < 8.1.6"}, {"status": "affected", "version": ">= 7.11.0-rc.0, < 8.0.7"}, {"status": "affected", "version": "< 7.10.13"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13, the POST /api/v1/fingerprint REST endpoint enforces authentication (authRequired: true) but performs no authorization check. Any authenticated user \u2014 including a standard user role account \u2014 can call this endpoint with {\"setDeploymentAs\": \"new-workspace\"} to permanently deregister the workspace from Rocket.Chat Cloud. This wipes all cloud credentials, removes the workspace license, breaks push notifications for all users, and requires manual re-registration to recover. This vulnerability is fixed in 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13."}, {"lang": "es", "value": "Rocket.Chat es una plataforma de comunicaciones de c\u00f3digo abierto, segura y totalmente personalizable. Antes de 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7 y 7.10.13, el endpoint REST POST /api/v1/fingerprint aplica autenticaci\u00f3n (authRequired: true) pero no realiza ninguna comprobaci\u00f3n de autorizaci\u00f3n. Cualquier usuario autenticado - incluyendo una cuenta con rol de usuario est\u00e1ndar - puede llamar a este endpoint con {\u201csetDeploymentAs\u201d: \u201cnew-workspace\u201d} para anular permanentemente el registro del espacio de trabajo de Rocket.Chat Cloud. Esto borra todas las credenciales de la nube, elimina la licencia del espacio de trabajo, interrumpe las notificaciones push para todos los usuarios y requiere un nuevo registro manual para recuperarse. Esta vulnerabilidad est\u00e1 corregida en 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7 y 7.10.13."}], "id": "CVE-2026-55762", "lastModified": "2026-10-25T23:10:00.167", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-55762", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-25T12:34:23.639307Z", "version": "2.0.3"}}]}, "published": "2026-06-24T22:16:49.667", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/RocketChat/Rocket.Chat/security/advisories/GHSA-8hhc-j325-rxqp"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.5.0-rc.0,8.5.1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.4.0-rc.0,8.4.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.3.0-rc.0,8.3.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.2.0-rc.0,8.2.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.1.0-rc.0,8.1.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.11.0-rc.0,8.0.7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,7.10.13)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Rocket.Chat", "source": "cna", "vendor": "RocketChat"}, "product": "rocket.chat", "vendor": "rocketchat"}], "created": "2026-06-24T22:45:15.367958+00:00", "updated": "2026-06-25T07:15:04.445347+00:00", "vendors": ["rocketchat", "rocketchat$PRODUCT$rocket.chat"]}