CVE-2026-72719

Chatwoot’s CVE-2026-72719 affects the Chatwoot application prior to version 4.9.0, where an authenticated account administrator could transfer resources across accounts via the writable account_id parameter. Affected resources include Portals, Automation Rules, Macros, and Twilio Channels, potent...