VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 29, 2025· Updated Jun 17, 2026

CVE-2025-6724

CVE-2025-6724

Description

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.

Affected products

3
  • Chef/Automate2 versions
    cpe:2.3:a:chef:automate:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:chef:automate:*:*:*:*:*:*:*:*range: <4.13.295
    • (no CPE)range: <4.13.295
  • Progress Software/Chef Automatev5
    Range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.