Which versions of Zammad are affected by CVE-2026-34724?

Zammad helpdesk versions up to 7.0.0 contain a remote code execution vulnerability in AI Agent configuration that allows authenticated administrators to execute arbitrary code on the server.. A patch is available.

How to fix or mitigate CVE-2026-34724?

Within 24 hours: inventory all Zammad instances and identify those running version 7.0.0 or earlier. Within 7 days: upgrade all affected instances to Zammad 7.0.1 or later, and audit administrative access logs for the past 30 days to detect suspicious AI Agent configuration changes. Within 30 days: implement administrative access controls limiting who can modify AI Agent settings, and conduct a security assessment of any configuration changes made by administrators during the vulnerability window.

Zammad CVE-2026-34724

Q: What is the CVSS score of CVE-2026-34724?

CVE-2026-34724 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-20564 HIGH

Code Injection (CWE-94)

2026-04-08 GitHub_M

RCE Code Injection Zammad

8.7

CVSS 4.0 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

Scope

Lifecycle Timeline

Analysis Updated

Apr 17, 2026 - 15:12 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Apr 17, 2026 - 15:07 vuln.today

cvss_changed

Analysis Updated

Apr 16, 2026 - 06:01 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

7.0.1

EUVD ID Assigned

Apr 08, 2026 - 19:31 euvd

EUVD-2026-20564

Analysis Generated

Apr 08, 2026 - 19:31 vuln.today

CVE Published

Apr 08, 2026 - 18:17 nvd

HIGH 8.7

DescriptionGitHub Advisory

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a server-side template injection vulnerability which leads to RCE via AI Agent exists. Impact is limited to environments where an attacker can control or influence type_enrichment_data (typically high-privilege administrative configuration). This vulnerability is fixed in 7.0.1.

AnalysisAI

Remote code execution in Zammad 7.0.0 allows authenticated administrators with high-level privileges to inject malicious server-side templates through AI Agent configuration parameters, leading to arbitrary code execution on the helpdesk server. Exploitation requires administrative access to control type_enrichment_data settings and user interaction. Vendor-released patch version 7.0.1 is available. EPSS score of 0.04% indicates low exploitation probability in the wild; no public exploit identified at time of analysis.

Technical ContextAI

Zammad is an open-source Ruby on Rails-based helpdesk and customer support platform. This vulnerability stems from CWE-94 (Improper Control of Generation of Code), specifically server-side template injection (SSTI) in the AI Agent functionality introduced in version 7.0.0. The type_enrichment_data parameter, which configures AI-driven ticket enrichment features, lacks proper input sanitization before being processed by the template engine. When an attacker with administrative privileges crafts malicious template syntax within this configuration parameter, the Rails template engine (likely ERB - Embedded Ruby) evaluates the injected code server-side during AI Agent operations. This allows arbitrary Ruby code execution within the Zammad application context, inheriting the web application's permissions on the underlying operating system. The vulnerability is specific to the AI Agent feature set, which appears to be a recent addition to the platform.

RemediationAI

Immediately upgrade Zammad installations to version 7.0.1, which contains the vendor-released patch addressing the template injection flaw. The upgrade path is straightforward for version 7.0.0 users and detailed instructions are available in the GitHub security advisory at https://github.com/zammad/zammad/security/advisories/GHSA-fg9w-jg8f-4j94. For environments where immediate patching is not feasible, implement compensating controls: disable AI Agent functionality entirely through the admin interface until patching is complete (this eliminates the vulnerable code path but removes AI-driven ticket enrichment features); restrict administrative console access to trusted IP ranges via firewall rules or reverse proxy ACLs (reduces attack surface but does not prevent exploitation by legitimate admins or if admin credentials are compromised); implement comprehensive audit logging of all changes to AI Agent configuration parameters, specifically monitoring type_enrichment_data modifications (enables detection but does not prevent exploitation); enforce mandatory multi-factor authentication for all administrative accounts (raises bar for credential compromise but adds operational overhead). Note that compensating controls only reduce risk and are not substitutes for patching. Organizations not using AI Agent features can verify the feature is disabled, which effectively eliminates vulnerability without service disruption.