CVE-2026-92527

Name of the Vulnerable Software and Affected Versions chatwoot versions prior to 4.17.2

Description A server-side request forgery (SSRF) issue exists within the Shopify OAuth component, specifically affecting the callbacks controller.rb file. This flaw allows remote attackers to manipulate requests to induce the server to make unauthorized requests to internal or external resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.