CVE-2026-67530

CVE-2026-67530 affects WACRM (0.7.0 and earlier). The automation send_webhook action and its validation allowed an authenticated user with automation privileges to submit an arbitrary webhook URL that the server fetched, bypassing the isDeliverableUrl SSRF guard in src/lib/webhooks/ssrf.ts. This ...