Critical severity10.0NVD Advisory· Published Sep 11, 2026

CVE-2026-80462

Description

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

Affected products

Chef/Chef Automateinferred2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)

Patches

Vulnerability mechanics

References

community.progress.com/s/article/Critical-Security-Bulletin---August-2026---Chef-Automate-Security-Vulnerabilitynvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000