CVE-2026-22560

Rocket.Chat / Rocket.Chat PUBLISHED

Description (CNA)

An open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be redirected to arbitrary URLs by manipulating parameters within a SAML endpoint.

Affected (CNA)

Vendor / product	Versions
Rocket.Chat / Rocket.Chat	affected 8.4.0 before 8.4.0

CWE

CWE-601

References

https://hackerone.com/reports/3418031
https://github.com/RocketChat/Rocket.Chat/pull/38994

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.