VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Sep 29, 2025· Updated Jun 17, 2026

CVE-2025-8868

CVE-2025-8868

Description

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via

improperly neutralized inputs used in an SQL command using a well-known token.

Affected products

3
  • Progress Software/Chef Automatev5
    Range: 0
  • Chef/Automatellm-fuzzy2 versions
    <4.13.295+ 1 more
    • (no CPE)range: <4.13.295
    • cpe:2.3:a:chef:automate:*:*:*:*:*:*:*:*range: <4.13.295

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.