CVE-2025-6724
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.
Risk Assessment
An authenticated user could escalate privileges and gain access to functionality they should not have, potentially leading to data integrity compromise or service takeover.
Recommendation
It is recommended to update Chef Automate to version 4.13.295 or later, which includes a fix for the SQL injection vulnerability.
Other vulnerabilities in Chef Automate
See all- CVE-2026-80462Critical
A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.
- CVE-2025-8868Critical
In Progress Chef Automate (versions earlier than 4.13.295) on Linux x86, an authenticated attacker can gain access to restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token.
Original NVD description (English source)
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS