{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "cpe": [
              "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
              "cpe:2.3:a:rocket.chat:rocket.chat:8.7.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
              {
                "introduced": "0"
              },
              {
                "fixed": "7.10.15"
              },
              {
                "introduced": "8.1.0"
              },
              {
                "fixed": "8.1.8"
              },
              {
                "introduced": "8.2.0"
              },
              {
                "fixed": "8.2.8"
              },
              {
                "introduced": "8.3.0"
              },
              {
                "fixed": "8.3.8"
              },
              {
                "introduced": "8.4.0"
              },
              {
                "fixed": "8.4.6"
              },
              {
                "introduced": "8.5.0"
              },
              {
                "fixed": "8.5.3"
              },
              {
                "introduced": "8.6.0"
              },
              {
                "fixed": "8.6.2"
              },
              {
                "introduced": "8.7.0"
              },
              {
                "last_affected": "8.7.0"
              }
            ],
            "source": [
              "CPE_RANGE",
              "CPE_STRING"
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "477ae4ae3928796b2c71c1db1a5ba2e848561300"
            },
            {
              "introduced": "2ca98764a077deb7efb710ff1d8f78c5c3e4c4a3"
            },
            {
              "fixed": "687c4e27ea0e95e7631a64ce27e2debcd5d76c14"
            },
            {
              "introduced": "f2a05ceed2086266fa3e36cf575c1794f68f00ab"
            },
            {
              "fixed": "16a2a0809c35a44233fce3c608e2e7878ebf03e2"
            },
            {
              "introduced": "00a1efa3fde455359510349d827acd91ba67905e"
            },
            {
              "fixed": "7ce1a49d686463656a3993c9c536b03104527c39"
            },
            {
              "introduced": "bb8c7be629b7cbffc7387285c5cb98e5835ad85f"
            },
            {
              "fixed": "b7279c54f80a23e4499a69acee75af3ec647249b"
            },
            {
              "introduced": "d0230e1ed86163b5cf9da57fda09fa86ea0b5c9f"
            },
            {
              "fixed": "7e36cbd4c1aa29a691e3fec9827537430b2f346a"
            },
            {
              "introduced": "814435ab3573909034a97dc70328dadea3793a1c"
            },
            {
              "fixed": "620394519991542b13db82e361dcb0c3e2014c1e"
            },
            {
              "introduced": "c59f19009d22d42cb86058d58a192982d2b7cca5"
            },
            {
              "last_affected": "c59f19009d22d42cb86058d58a192982d2b7cca5"
            }
          ],
          "repo": "https://github.com/rocketchat/rocket.chat",
          "type": "GIT"
        }
      ],
      "versions": [
        "8.7.0"
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "hackerone",
    "cwe_ids": [
      "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65644.json"
  },
  "details": "Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6, 8.3.8, 8.2.8, 8.1.8, and 7.10.15 has a REST API endpoint POST /api/v1/livechat/visitor that accepts an unauthenticated, unsanitized name field for Livechat visitors. This name is stored raw and later rendered via dangerouslySetInnerHTML in the Omnichannel Queue side panel (InquireSidePanelItem.tsx), injecting a real, clickable HTML link - pointing to any attacker-controlled domain, with arbitrary social-engineering text - into the DOM of any agent viewing the queue.",
  "id": "CVE-2026-65644",
  "modified": "2026-09-06T11:31:04.187694515Z",
  "published": "2026-08-21T02:53:43.406Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://hackerone.com/reports/3872858"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65644.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65644"
    },
    {
      "type": "FIX",
      "url": "https://github.com/RocketChat/Rocket.Chat/pull/41595"
    }
  ],
  "schema_version": "1.9.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}