CVE-2026-92527

A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbackscontroller.rb of the component Shopify OAuth. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

EUVD-2026-81136

A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbackscontroller.rb of the component Shopify OAuth. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

CVE-2026-92527

A server-side request forgery (SSRF) vulnerability affects chatwoot versions up to 4.17.1 in the Shopify OAuth component, specifically in the file callbacks_controller.rb . The root cause involves manipulation of an unknown function within that file, enabling a remote attacker with low privileges...

CVE-2026-92527 chatwoot Shopify OAuth callbacks_controller.rb server-side request forgery

A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbackscontroller.rb of the component Shopify OAuth. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

CVE-2026-92527 chatwoot Shopify OAuth callbacks_controller.rb server-side request forgery

A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbackscontroller.rb of the component Shopify OAuth. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

CVE-2026-92527 chatwoot Shopify OAuth callbacks_controller.rb server-side request forgery

A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbackscontroller.rb of the component Shopify OAuth. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

PT-2026-94022

Name of the Vulnerable Software and Affected Versions chatwoot versions prior to 4.17.2 Description A server-side request forgery SSRF issue exists within the Shopify OAuth component, specifically affecting the callbacks controller.rb file. This flaw allows remote attackers to manipulate requests...

CVE-2026-92527: Server-Side Request Forgery (SSRF)

A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbackscontroller.rb of the component Shopify OAuth. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the...