CVE-2026-72719

Chatwoot is a customer engagement suite. Prior to 4.9.0, Chatwoot allowed authenticated account administrators to transfer Portals, Automation Rules, Macros, and Twilio Channels to other accounts through the writable account_id parameter. This could break tenant isolation and cause cross-account data exposure, unauthorized configuration changes, or loss of access to transferred resources. This issue is fixed in version 4.9.0.

• CWE-915

• https://github.com/chatwoot/chatwoot/commit/86da3f7c069f8ed6dce2576e1a760ca72b6f40fd
• https://github.com/chatwoot/chatwoot/pull/13116
• https://github.com/chatwoot/chatwoot/releases/tag/v4.9.0
• https://github.com/chatwoot/chatwoot/security/advisories/GHSA-x288-jh8j-348c

Published

Aug 10, 2026

Last Modified

Aug 10, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-72694A flaw was found in MRTG. When the MRTG daemon is started as…7.1
• CVE-2026-7270An operator precedence bug in the kernel results in a scenar…7.8
• CVE-2026-7271A vulnerability was detected in DV0x creative-ad-agent up to…5.5
• CVE-2026-72712Nmap versions up to and including 7.99 contains a denial of …6.5
• CVE-2026-72713XAgent contains a path traversal vulnerability in the worksp…8.7
• CVE-2026-72718goose is general-purpose AI agent that runs on your machine.…7
• CVE-2026-7272A flaw has been found in WilliamCloudQi matlab-mcp-server up…7.3
• CVE-2026-72720Discourse is an open-source discussion platform. Prior to 20…6.4
• CVE-2026-72721Discourse is an open-source discussion platform. Prior to 20…5.3
• CVE-2026-72722Discourse is an open-source discussion platform. Prior to 20…4.3
• CVE-2026-72723Discourse is an open-source discussion platform. Prior to 20…5.3
• CVE-2026-72724Discourse is an open-source discussion platform. Prior to 20…4.3