chef_automate vulnerabilities

CVEs whose affected-version data names the chef_automate package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-80462Critical· 10.0

1w ago

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

▾ MidnightProgress Software · Chef AutomateEPSS 0.30%via NVD