CVE-2026-13229

Name of the Vulnerable Software and Affected Versions Zammad version 7.1.0

Description An authenticated improper authorization issue exists in the ticket article attachment cloning endpoint. Improper authorization occurs when a system fails to properly verify if a user has the necessary permissions to perform a specific action, potentially allowing an authenticated user to clone attachments they should not have access to.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.