Skip to content
OpenAdvisories

Vendor

Rocket.Chat

16 known vulnerabilities.

Products

Rocket.Chat 14 Rocket.Chat Desktop 1 Mobile 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-65645

    Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6. 8.3.8, 8.2.8, 8.1.8, and 7.10.15, the Meteor DDP meth…

    Rocket.Chat Rocket.Chat
  • Medium 5.3
    CVE-2026-32994

    The /api/v1/autotranslate.translateMessage endpoint in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.6, <7.13.8…

    Rocket.Chat Rocket.Chat
  • Medium 4.3
    CVE-2026-29197

    In versions <8.4.0, <8.3.2, <8.2.2, <8.1.3, <8.0.4, <7.13.6, <7.12.7, <7.11.7, and <7.10.10, the endpoints /api/apps/lo…

    Rocket.Chat Rocket.Chat
  • Medium 5.3
    CVE-2026-22560

    An open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be redirected to arbitrary URLs b…

    Rocket.Chat Rocket.Chat
  • Medium 5.5
    CVE-2024-8270

    macOS Rocket.Chat: TCC Policy Bypass via Dylib Injection Due to Missing Code Signing Flags and Dangerous Entitlements

    The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing Transparency, Consent, and Control (TCC) policies, enabling the exploitation or abuse of permissions specified in its entitlements (e.g., microphone, camera, automation, ne…

    Rocket.Chat Rocket.Chat Desktop
  • Medium 6.7
    CVE-2024-42027

    The E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient, allowing attackers to…

    Rocket.Chat Mobile
  • Medium 6.5
    CVE-2024-37405

    Livechat messages can be leaked by combining two NoSQL injections affecting livechat:loginByToken (pre-authentication) …

    Rocket.Chat Rocket.Chat