CVE-2026-41075
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
RT, an open-source issue and ticket tracking system, versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2, contains an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing them to read or modify data in the RT database.
Risk Assessment
The risk includes unauthorized access to sensitive data stored in the RT database and potential modification, which could lead to a breach of confidentiality and integrity of the system.
Recommendation
Immediately upgrade RT to version 5.0.10 or 6.0.3. If an upgrade is not possible, temporarily restrict RT account access to trusted users.
Other vulnerabilities in RT
See all- CVE-2026-44230Medium
RT versions 5.0.4-5.0.9 and 6.0.0-6.0.2 contain a reflected XSS vulnerability. An attacker can trick an authenticated user into visiting a crafted URL, executing arbitrary JavaScript in their session.
- CVE-2026-44229Medium
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 and 6.0.0 and above, prior to both 5.0.10 and 6.0.3 contain a Cross-Site Scripting (XSS) vulnerability where uploaded content is served inline rather than as an attachment. An authenticated user who can upload content can include JavaScript in the upload that will execute in the browser session of any RT user who later views or downloads it.
- CVE-2026-44228Medium
RT (Request Tracker) versions 6.0.0 through 6.0.2 contain a stored XSS vulnerability. An authenticated user with appropriate permissions can inject JavaScript that executes when another user views the page.
- CVE-2026-44227Medium
RT (ticket tracking system) versions 6.0.0 through 6.0.2 contain a reflected XSS vulnerability. An attacker can trick an authenticated user into visiting a crafted URL, allowing arbitrary JavaScript execution in the victim's session.
- CVE-2026-41076High
RT is a ticket tracking system where versions up to 5.0.9 and 6.0.0-6.0.2 contain an authentication bypass vulnerability in LDAP/AD setups. An attacker can authenticate as any LDAP-backed user without valid credentials.
- CVE-2026-41074High
RT versions 6.0.0 through 6.0.2 contain a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can induce a logged-in RT user to visit a malicious web page, triggering arbitrary state-changing actions in RT on that user's behalf.
Original NVD description (English source)
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing them to read or modify data in the RT database. This issue has been fixed in versions 5.0.10 and 6.0.3. If developers are unable to upgrade immediately, they can temporarily work around this issue by restricting RT account access to trusted users.