Authentication Bypass Vulnerability in Rocket.Chat Communication Platform

CVE-2026-45688

What is CVE-2026-45688?

Rocket.Chat, the open-source communications platform, has a vulnerability in its CAS login handling prior to specified versions. An unauthenticated attacker can exploit this flaw by injecting MongoDB query operators into the expected opaque ticket string. This enables them to bypass the necessary CAS ticket verification, allowing them to match a legitimate credential token and gain unauthorized access, potentially escalating to full instance compromise if the victim user has administrative privileges. The vulnerability has been addressed in the latest product versions.

References