CVE-2023-40050

CRITICAL

Chef Automate <= 4.10.29 - Remote Code Execution via InSpec Check Command

Title source: llm

Description

Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with maliciously crafted profile allows remote code execution.

References (3)

Core 3

Core References

Release Notes release-notes

https://docs.chef.io/release_notes_automate/

Product release-notes

https://docs.chef.io/automate/profiles/

Vendor Advisory vendor-advisory

https://community.progress.com/s/article/Product-Alert-Bulletin-October-2023-CHEF-Automate-CVE-2023-40050

Scores

CVSS v3 9.9

EPSS 0.0118

EPSS Percentile 63.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-434 CWE-94

Status published

Products (1)

chef/automate < 4.10.29

Published Oct 31, 2023

Tracked Since Feb 18, 2026