EUVD-2026-76099
GHSA-pqcf-f89w-vr6m
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Remote unauthenticated missing-auth bypass at a gateway that authorizes separate backends (S:C) with full C/I/A impact; the vendor's 'specific conditions' could arguably justify AC:H but I retain AC:L per the described low-complexity bypass.
Primary rating from Vendor (ProgressSoftware).
CVSS VectorVendor: ProgressSoftware
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.
AnalysisAI
Unauthenticated privilege escalation in Progress Chef Automate lets a remote actor bypass the API gateway's identity validation and reach protected Automate functionality without credentials. The flaw stems from missing authentication on a critical path (CWE-306), carries a maximum CVSS 10.0 rating with a scope change, and is documented in a Progress Critical Security Bulletin. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation targets the Chef Automate API gateway / identity-validation path and requires network reachability to that gateway; per the CVSS vector it needs no authentication, no user interaction, and low complexity. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine top-priority issue: the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H = 10.0) describes remote, unauthenticated, low-complexity exploitation with full confidentiality, integrity, and availability impact and a scope change, and the root cause (missing authentication) is exactly the kind of flaw that is trivially automatable once understood. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fixed Chef Automate release identified in Progress's August 2026 Critical Security Bulletin (https://community.progress.com/s/article/Critical-Security-Bulletin---August-2026---Chef-Automate-Security-Vulnerability); an exact patched version number is not present in the available data, so confirm the target build directly from that advisory before upgrading. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: identify all Progress Chef Automate deployments in your environment, consult Progress Critical Security Bulletin progress-ps-2026-8034 to determine which versions are affected, and document business-critical configurations managed by Chef. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today