CVE-2026-55762

{
  "id": "CVE-2026-55762",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-24T22:16:49.667",
  "lastModified": "2026-10-25T23:10:00.167",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13, the POST /api/v1/fingerprint REST endpoint enforces authentication (authRequired: true) but performs no authorization check. Any authenticated user — including a standard user role account — can call this endpoint with {\"setDeploymentAs\": \"new-workspace\"} to permanently deregister the workspace from Rocket.Chat Cloud. This wipes all cloud credentials, removes the workspace license, breaks push notifications for all users, and requires manual re-registration to recover. This vulnerability is fixed in 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13."
    },
    {
      "lang": "es",
      "value": "Rocket.Chat es una plataforma de comunicaciones de código abierto, segura y totalmente personalizable. Antes de 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7 y 7.10.13, el endpoint REST POST /api/v1/fingerprint aplica autenticación (authRequired: true) pero no realiza ninguna comprobación de autorización. Cualquier usuario autenticado - incluyendo una cuenta con rol de usuario estándar - puede llamar a este endpoint con {“setDeploymentAs”: “new-workspace”} para anular permanentemente el registro del espacio de trabajo de Rocket.Chat Cloud. Esto borra todas las credenciales de la nube, elimina la licencia del espacio de trabajo, interrumpe las notificaciones push para todos los usuarios y requiere un nuevo registro manual para recuperarse. Esta vulnerabilidad está corregida en 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7 y 7.10.13."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "RocketChat",
          "product": "Rocket.Chat",
          "versions": [
            {
              "version": ">= 8.5.0-rc.0, < 8.5.1",
              "status": "affected"
            },
            {
              "version": ">= 8.4.0-rc.0, < 8.4.4",
              "status": "affected"
            },
            {
              "version": ">= 8.3.0-rc.0, < 8.3.6",
              "status": "affected"
            },
            {
              "version": ">= 8.2.0-rc.0, < 8.2.6",
              "status": "affected"
            },
            {
              "version": ">= 8.1.0-rc.0, < 8.1.6",
              "status": "affected"
            },
            {
              "version": ">= 7.11.0-rc.0, < 8.0.7",
              "status": "affected"
            },
            {
              "version": "< 7.10.13",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-25T12:34:23.639307Z",
          "id": "CVE-2026-55762",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/RocketChat/Rocket.Chat/security/advisories/GHSA-8hhc-j325-rxqp",
      "source": "[email protected]"
    }
  ]
}