CVE-2026-32994

🗓️ 19 May 2026 04:43:41Reported by hackeroneType

cve🔗 web.nvd.nist.gov👁 16 Views🌐 WEB

Authenticated users can fetch full message content via autotranslate endpoint without access checks.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-32994	19 May 202604:43	–	attackerkb
CNNVD	Rocket.Chat 访问控制错误漏洞	19 May 202600:00	–	cnnvd
Cvelist	CVE-2026-32994	19 May 202604:43	–	cvelist
EUVD	EUVD-2026-30835	19 May 202604:43	–	euvd
Hacker One	Rocket.Chat: IDOR: autotranslate.translateMessage Full Message Content Leak	5 May 202602:20	–	hackerone
NVD	CVE-2026-32994	19 May 202605:16	–	nvd
Positive Technologies	PT-2026-41825	19 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-32994	5 Jun 202619:35	–	redhatcve
Vulnrichment	CVE-2026-32994	19 May 202604:43	–	vulnrichment

Vulners

Node

rocket.chat rocket.chatRange≤7.10.12

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Rocket.Chat",
    "product": "Rocket.Chat",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "8.5.0",
        "versionType": "semver"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "8.4.2",
        "versionType": "semver"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "8.3.4",
        "versionType": "semver"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "8.2.4",
        "versionType": "semver"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "8.1.5",
        "versionType": "semver"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "8.0.6",
        "versionType": "semver"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "7.13.8",
        "versionType": "semver"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "7.10.12",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
hackerone	www.hackerone.com/reports/3713682

Parameter	Position	Path	Description	CWE
messageId	request body	/api/v1/autotranslate.translateMessage	Authenticated users can retrieve full content of any message by supplying a target messageId; no room access check performed.	CWE-284

19 May 2026 14:50Current

6.1Medium risk

Vulners AI Score6.1

CVSS 35.3

EPSS0.00028

SSVC

CWE-284