CVE-2026-45687 | RocketChat Rocket.Chat up to 8.4.x Set dynamically-determined object attributes (GHSA-fhc2-x8cp-c5ch)

June 25, 2026 Yanac

A vulnerability categorized as critical has been discovered in RocketChat Rocket.Chat up to 8.4.x. Affected is an unknown function. Executing a manipulation of the argument Set can lead to dynamically-determined object attributes.

This vulnerability is registered as CVE-2026-45687. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More