CVE-2026-65644: XSS
Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6, 8.3.8, 8.2.8, 8.1.8, and 7.10.15 has a REST API endpoint POST /api/v1/livechat/visitor that accepts an unauthenticated, unsanitized name field for Livechat visitors. This name is stored raw and later rendered via dangerouslySetInnerHTML in the Omnichannel Queue side panel (InquireSidePanelItem.tsx), injecting a real, clickable HTML link - pointing to any attacker-controlled domain, with arbitrary social-engineering text - into the DOM of any agent viewing the queue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Rocket.Chatto a version that resolves this vulnerability.Fixed in 8.8.0 - Upgrade
Upgrade
Rocket.Chatto a version that resolves this vulnerability.Fixed in 8.7.1 - Upgrade
Upgrade
Rocket.Chatto a version that resolves this vulnerability.Fixed in 8.6.2 - Upgrade
Upgrade
Rocket.Chatto a version that resolves this vulnerability.Fixed in 8.5.3 - Upgrade
Upgrade
Rocket.Chatto a version that resolves this vulnerability.Fixed in 8.4.6 - Upgrade
Upgrade
Rocket.Chatto a version that resolves this vulnerability.Fixed in 8.3.8 - Upgrade
Upgrade
Rocket.Chatto a version that resolves this vulnerability.Fixed in 8.2.8 - Upgrade
Upgrade
Rocket.Chatto a version that resolves this vulnerability.Fixed in 8.1.8 - Upgrade
Upgrade
Rocket.Chatto a version that resolves this vulnerability.Fixed in 7.10.15
Event History
Frequently Asked Questions
Who is exposed to the injected content?
Any agent who views the Omnichannel Queue side panel can be shown the attacker-controlled clickable link. The issue affects deployments using Livechat and the affected queue interface.
What does an attacker need to exploit this?
The attacker only needs to submit a POST request to /api/v1/livechat/visitor with a crafted name value. The endpoint accepts this field without authentication.
Is user interaction required for impact?
An agent must view the relevant queue item for the crafted HTML link to be rendered. The link can contain attacker-chosen social-engineering text and point to an attacker-controlled domain.
What versions should be updated?
Update to 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6, 8.3.8, 8.2.8, 8.1.8, or 7.10.15, as applicable to the release branch in use.