CVE-2026-80462

CRITICAL NVD

CVSS Score 10

Severity CRITICAL

Published Sep 11, 2026

Vendor unknown

Description

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

References

https://community.progress.com/s/article/Critical-Security-Bulletin---August-2026---Chef-Automate-Security-Vulnerability