CVE Intelligence

Chef Automate vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Chef Automate: 2 record(s), with affected versions and fixes.
cpe:2.3:a:chef:automate

CVE-2025-8868 High · 8.8 Public exploit CWE-89 Sep 29, 2025
Chef Automate compliance service SQL Injection Vulnerability
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token.
CVE-2025-6724 High · 8.8 CWE-89 Sep 29, 2025
Chef Automate SQL Injection Vulnerability
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.