Permission Check Flaws in Zammad Helpdesk System

CVE-2026-56724

What is CVE-2026-56724?

A vulnerability in Zammad, a web-based open-source helpdesk system, has been discovered where inadequate permission checks in the knowledge base management module allowed users with limited access to view or interact with data outside their authorized scope. This vulnerability stemmed from insufficient data validation for linked items, potentially exposing sensitive information. The issue has been resolved in version 7.0.2, which introduces enhanced data access controls through improved validation processes, ensuring that users can only access data that aligns with their permissions.

References