CVE-2026-80462

Privilege Escalation in Progress Chef Automate

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

Affected

Progress Software · Chef Automate

CVSS v3.1 PROGRESS

10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

2.01% chance of exploitation in the next 30 days, 81st percentile

Nuclei

critical · CWE-306

Published

2026-09-11

Updated

2026-09-18

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-80462.yaml

References

• CVE Record
• NVD entry