CVE-2026-34724: Zammad Helpdesk RCE Vulnerability

CVE-2026-34724 Overview

CVE-2026-34724 is a server-side template injection (SSTI) vulnerability in Zammad, a web-based open source helpdesk and customer support system. This vulnerability exists in the AI Agent feature and can lead to remote code execution (RCE) when exploited. The impact is limited to environments where an attacker can control or influence type_enrichment_data, which typically requires high-privilege administrative configuration access.

Critical Impact

Successful exploitation allows authenticated attackers with administrative privileges to execute arbitrary code on the server through server-side template injection via the AI Agent functionality.

Affected Products

• Zammad versions prior to 7.0.1

Discovery Timeline

• 2026-04-08 - CVE-2026-34724 published to NVD
• 2026-04-08 - Last updated in NVD database

Technical Details for CVE-2026-34724

Vulnerability Analysis

This vulnerability is classified under CWE-94 (Improper Control of Generation of Code), which encompasses code injection flaws including server-side template injection. The vulnerability exists within Zammad's AI Agent feature, where user-controlled input in the type_enrichment_data parameter is improperly processed by the template engine without adequate sanitization.

Server-side template injection occurs when an attacker is able to inject malicious template directives into a template that is then executed on the server. In the context of Zammad, the AI Agent feature processes enrichment data that, when manipulated by an attacker with administrative access, can be leveraged to inject arbitrary template code. This injected code is subsequently rendered and executed by the server-side template engine, allowing the attacker to achieve remote code execution.

The attack requires network access with high privileges and user interaction, making the attack complexity higher than typical RCE vulnerabilities. However, once exploited, the impact is severe across confidentiality, integrity, and availability dimensions, with potential for scope change affecting other components in the environment.

Root Cause

The root cause lies in insufficient input validation and sanitization of the type_enrichment_data parameter within the AI Agent feature. When template expressions or directives are passed through this parameter without proper escaping or restriction, the template engine interprets and executes them as legitimate template code. This allows an attacker to break out of the intended data context and inject arbitrary server-side template commands.

Attack Vector

The attack requires an authenticated attacker with administrative privileges to access the AI Agent configuration. By manipulating the type_enrichment_data field with malicious template injection payloads, the attacker can execute arbitrary code on the underlying server. The network-based attack vector means exploitation can be performed remotely against exposed Zammad instances.

The exploitation mechanism involves crafting template-specific injection payloads that, when processed by the template engine, execute attacker-controlled commands. For detailed technical information about this vulnerability, refer to the GitHub Security Advisory.

Detection Methods for CVE-2026-34724

Indicators of Compromise

• Unexpected modifications to AI Agent configuration settings, particularly in type_enrichment_data fields
• Unusual process execution originating from the Zammad application server
• Administrative audit logs showing repeated access to AI Agent configuration endpoints
• Suspicious template syntax patterns in configuration data or request logs

Detection Strategies

• Monitor administrative activity logs for unusual changes to AI Agent settings
• Implement web application firewall (WAF) rules to detect common SSTI payloads in request parameters
• Review audit trails for administrative configuration changes, especially those involving enrichment data
• Deploy runtime application self-protection (RASP) solutions to detect template injection attempts

Monitoring Recommendations

• Enable verbose logging for AI Agent feature interactions and configuration changes
• Set up alerts for administrative access to sensitive configuration endpoints
• Monitor for anomalous outbound network connections from the Zammad server that may indicate post-exploitation activity
• Implement file integrity monitoring on Zammad application directories

How to Mitigate CVE-2026-34724

Immediate Actions Required

• Upgrade Zammad to version 7.0.1 or later immediately
• Review audit logs for any suspicious administrative activity targeting AI Agent configuration
• Restrict administrative access to the AI Agent feature to only essential personnel
• Implement network segmentation to limit exposure of Zammad administrative interfaces

Patch Information

The vulnerability is fixed in Zammad version 7.0.1. Organizations should prioritize upgrading to this version or later to remediate the vulnerability. For additional details and the security advisory, see the GitHub Security Advisory for GHSA-fg9w-jg8f-4j94.

Workarounds

• Limit administrative access to the AI Agent configuration to trusted users only
• If AI Agent functionality is not required, consider disabling the feature until patching is completed
• Implement additional authentication controls for administrative interfaces
• Monitor and restrict network access to Zammad administrative endpoints using firewall rules

# Example: Restrict access to Zammad admin interfaces via nginx
location /admin {
    allow 10.0.0.0/8;  # Allow internal network only
    deny all;
}