---
id: CVE-2026-84462
title: Zammad is a web based open source helpdesk/customer support system
summary: >-
  Zammad is a web based open source helpdesk/customer support system. Prior to
  7.1.2, a security filter that protects Zammad's AI Agent configuration can be
  bypassed by entering specially crafted text into one of an AI Agent's fields.
  An a…
severity: high
cvss: 8.6
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'
cwe:
  - CWE-20
  - CWE-94
  - CWE-1336
vendor: zammad
product: zammad
affected:
  - zammad < 7.1.2
published: '2026-09-25'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T19:17:57.640'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-84462'
references:
  - url: >-
      https://github.com/zammad/zammad/commit/e3b0c8df91ad2108c8305be23e8fe6f73fb9718d
    label: security-advisories@github.com
  - url: 'https://github.com/zammad/zammad/security/advisories/GHSA-gp3x-9xm8-rcj6'
    label: security-advisories@github.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-25T18:11:23.119845Z'
cvssSource: cna
ingestedAt: '2026-09-25T18:14:20.405Z'
---

## Overview

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a security filter that protects Zammad's AI Agent configuration can be bypassed by entering specially crafted text into one of an AI Agent's fields. An administrator with permission to create or edit AI Agents could exploit this to run arbitrary commands on the server that hosts Zammad, potentially reading, modifying, or destroying all data stored on that server. No interaction from other users is needed; the malicious code runs automatically the next time the affected AI Agent processes a ticket. This issue is fixed in version 7.1.2.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.