CVE-2026-80462 — Privilege Escalation in Progress Chef Automate

CVE-2026-80462

Privilege Escalation in Progress Chef Automate PUBLISHED

Description (CNA)

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

Affected (CNA)

Vendor / product	Versions
Progress Software / Chef Automate	affected 4.13.516 before 4.13.520; unaffected 1.0.0 before 4.13.516

CWE

CWE-306

References

https://community.progress.com/s/article/Critical-Security-Bulletin---August-2026---Chef-Automate-Security-Vulnerability

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.