Path Traversal Attack on Zammad Helpdesk System by Zammad

CVE-2026-61525

What is CVE-2026-61525?

Zammad, a popular open-source helpdesk and customer support system, is vulnerable due to its session management for websocket and long-polling connections. In versions 7.0.2 and 7.1.0, improper validation of session identifiers allows an authenticated attacker to exploit this flaw, conducting a path traversal attack that can reference file locations outside the designated storage space. This can lead to unauthorized deletion of files on the server, given that the default file-based session storage is being utilized. Fortunately, the vulnerability has been addressed in subsequent releases, 7.0.3 and 7.1.1, which mitigate these risks effectively.

References