Progress Chef Chef360 vulnerabilities

CVE-2026-8100 [HIGH] CWE-23 CVE-2026-8100: Impact A security issue has been identified in Chef 360 that could allow unauthorized access to pro Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper handling of URL-encoded paths during request processing. In certain scenarios, an authenticated request may bypass standard access controls gaining additional privileges, potentia

CVE-2026-8668 [LOW] CWE-523 CVE-2026-8668: A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to interna A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method entirely.