CVE-2026-80462Privilege Escalation in Progress Chef Automate

Description

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://community.progress.com/s/article/Critical-Security-Bulletin---August-2026---Chef-Automate-Security-Vu… vendor-advisory