Skip to content
OpenAdvisories

Product · Progress Software

Chef Automate

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-80462 Scanner template

    Privilege Escalation in Progress Chef Automate

    A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

    Progress Software Chef Automate
  • Critical 9.8
    CVE-2025-8868 Scanner template EPSS 28%

    Chef Automate compliance service SQL Injection Vulnerability

    In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a we…

    Progress Software Chef Automate
  • Critical 9.9
    CVE-2023-40050

    Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application

    Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with maliciously crafted profile allows remote code execution.

    Progress Software Chef Automate