Skip to content
OpenAdvisories

Vendor

RocketChat

20 known vulnerabilities.

Products

Rocket.Chat 20
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-75575

    Rocket.Chat Missing DDP Rate Limit on the sendForgotPasswordEmail Meteor Method

    Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may invoke it as often as it likes. The method is reachable over DDP and over the HTTP route POST /api/v1/method.callAnon/sendForgotPasswordEm…

    RocketChat Rocket.Chat
  • Medium 4.3
    CVE-2026-72919

    Rocket.Chat: Broken Access Control in channels.convertToTeam Allows Unauthorized Conversion of Public Channels into Teams

    Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the channels.convertToTeam REST endpoint allows an authenticated registered user with the create-team per…

    RocketChat Rocket.Chat
  • Medium 5.4
    CVE-2026-72918

    Rocket.Chat: Insecure implementation of websocket notifications

    Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the stream-notify-user stream in the WebSocket protocol allows an authenticated user to write arbitrary n…

    RocketChat Rocket.Chat
  • Medium 6.7
    CVE-2026-49278

    Rocket.Chat: Livechat Visitor Profile Disclosure Leaks Bearer Token and Enables Visitor Impersonation

    Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.2, 8.3.4, 8.2.4, 8.1.5, 8.0.6, 7.13.8, and 7.10.12, in the visitors.info endpoint, https://developer.rocket.chat/apidocs/get-visitor-information-by-id-1, to…

    RocketChat Rocket.Chat
  • Medium 4.4
    CVE-2026-47733

    Rocket.Chat: Missing URL protocol sanitization in ImageElement allows javascript: URLs in markdown images

    Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, the ImageElement component in packages/gazzodown renders user-controlled src values directly into <a href> and <img src> attributes without protocol sanitizatio…

    RocketChat Rocket.Chat
  • Medium 6.9
    CVE-2026-30833

    Rocket.Chat: NoSQL injection in the EE ddp-streamer-service

    Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to versions 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1, and 8.2.0, a NoSQL injection vulnerability exists in Rocket.Chat's account service used in the ddp-streamer micr…

    RocketChat Rocket.Chat
  • Medium 4.3
    CVE-2021-32832

    ReDOS in Rocket.Chat

    Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in …

    RocketChat Rocket.Chat