CVE-2026-45688 | RocketChat Rocket.Chat up to 8.4.x data query logic injection (GHSA-rr54-jf4h-6cj9)

June 25, 2026 Yanac

A vulnerability was found in RocketChat Rocket.Chat up to 8.4.x. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to improper neutralization of special elements in data query logic.

This vulnerability is listed as CVE-2026-45688. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More