Unrated severityNVD Advisory· Published Sep 29, 2025· Updated Sep 29, 2025
Chef Automate SQL Injection Vulnerability
CVE-2025-6724
Description
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.
Affected products
2- Range: <4.13.295
- Progress Software/Chef Automatev5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.