CVE-2026-41075

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing them to read or modify data in the RT database. This issue has been fixed in versions 5.0.10 and 6.0.3. If developers are unable to upgrade immediately, they can temporarily work around this issue by restricting RT account access to trusted users.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/bestpractical/rt/releases/tag/rt-5.0.10
https://github.com/bestpractical/rt/releases/tag/rt-6.0.3
https://github.com/bestpractical/rt/security/advisories/GHSA-7vf8-xv7w-97c6

Configurations

No configuration.

History

23 Jul 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) RT es un sistema de seguimiento de problemas y tickets de código abierto, de nivel empresarial. Las versiones 5.0.0 a 5.0.9 y 6.0.0 a 6.0.2 contienen una vulnerabilidad de inyección SQL. Un usuario autenticado puede crear una entrada que se incorpora en consultas de base de datos sin la validación adecuada, lo que potencialmente les permite leer o modificar datos en la base de datos de RT. Este problema ha sido solucionado en las versiones 5.0.10 y 6.0.3. Si los desarrolladores no pueden actualizar inmediatamente, pueden solucionar temporalmente este problema restringiendo el acceso a la cuenta de RT a usuarios de confianza.

22 May 2026, 22:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-22 22:16

Updated : 2026-07-23 11:10

NVD link : CVE-2026-41075

Mitre link : CVE-2026-41075

CVE.ORG link : CVE-2026-41075

JSON object : View

Products Affected

No product.

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2026-41075", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-41075", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-27T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "bestpractical", "product": "rt", "versions": [{"status": "affected", "version": ">= 5.0.0, < 5.0.10"}, {"status": "affected", "version": ">= 6.0.0, < 6.0.3"}]}]}], "published": "2026-05-22T22:16:55.940", "references": [{"url": "https://github.com/bestpractical/rt/releases/tag/rt-5.0.10", "source": "security-advisories@github.com"}, {"url": "https://github.com/bestpractical/rt/releases/tag/rt-6.0.3", "source": "security-advisories@github.com"}, {"url": "https://github.com/bestpractical/rt/security/advisories/GHSA-7vf8-xv7w-97c6", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing them to read or modify data in the RT database. This issue has been fixed in versions 5.0.10 and 6.0.3. If developers are unable to upgrade immediately, they can temporarily work around this issue by restricting RT account access to trusted users."}, {"lang": "es", "value": "RT es un sistema de seguimiento de problemas y tickets de c\u00f3digo abierto, de nivel empresarial. Las versiones 5.0.0 a 5.0.9 y 6.0.0 a 6.0.2 contienen una vulnerabilidad de inyecci\u00f3n SQL. Un usuario autenticado puede crear una entrada que se incorpora en consultas de base de datos sin la validaci\u00f3n adecuada, lo que potencialmente les permite leer o modificar datos en la base de datos de RT. Este problema ha sido solucionado en las versiones 5.0.10 y 6.0.3. Si los desarrolladores no pueden actualizar inmediatamente, pueden solucionar temporalmente este problema restringiendo el acceso a la cuenta de RT a usuarios de confianza."}], "lastModified": "2026-07-23T11:10:00.120", "sourceIdentifier": "security-advisories@github.com"}