CVE-2026-45688 Rocket.Chat: Pre-Auth NoSQL Injection in CAS Login Handler leading to Arbitrary CAS/SAML User Session Hijack

[
  {
    "vendor": "RocketChat",
    "product": "Rocket.Chat",
    "versions": [
      {
        "version": ">= 8.5.0-rc.0, < 8.5.0",
        "status": "affected"
      },
      {
        "version": ">= 8.4.0-rc.0, < 8.4.1",
        "status": "affected"
      },
      {
        "version": ">= 8.3.0-rc.0, < 8.3.3",
        "status": "affected"
      },
      {
        "version": ">= 8.2.0-rc.0, < 8.2.3",
        "status": "affected"
      },
      {
        "version": ">= 8.1.0-rc.0, < 8.1.4",
        "status": "affected"
      },
      {
        "version": ">= 8.0.0-rc.0, < 8.0.5",
        "status": "affected"
      },
      {
        "version": ">= 7.11.0-rc.0, < 7.13.7",
        "status": "affected"
      },
      {
        "version": "< 7.10.11",
        "status": "affected"
      }
    ]
  }
]