CVE-2026-80462
CRITICAL10.0CVSS v3
—CVSS v2
2.01%
EPSS (exploit probability)
CWE-306CWE
Description
A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected routers (0)
No routers currently mapped to this CVE in our database.