Unrated severityNVD Advisory· Published Sep 29, 2025· Updated Sep 29, 2025
Chef Automate compliance service SQL Injection Vulnerability
CVE-2025-8868
Description
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via
improperly neutralized inputs used in an SQL command using a well-known token.
Affected products
2- Range: <4.13.295
- Progress Software/Chef Automatev5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.