CVE-2026-55759

Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 8.5.1 Rocket.Chat versions prior to 8.4.4 Rocket.Chat versions prior to 8.3.6 Rocket.Chat versions prior to 8.2.6 Rocket.Chat versions prior to 8.1.6 Rocket.Chat versions prior to 8.0.7 Rocket.Chat versions prior to 7.10.13

Description The Apple Sign-In handler verifies JSON Web Token (JWT) signatures but fails to perform claims validation. Consequently, any Apple-signed JWT containing a non-empty iss (issuer) is accepted, ignoring the aud (audience), exp (expiration time), nbf (not before), or nonce (number used once) claims. An attacker who obtains a target user's Apple identity token—via server logs, an intercepted sign-in flow, or another application within the same Apple developer team—can replay the token to authenticate as that user without any expiration on the replay window.

Recommendations Update to version 8.5.1 Update to version 8.4.4 Update to version 8.3.6 Update to version 8.2.6 Update to version 8.1.6 Update to version 8.0.7 Update to version 7.10.13