CVE Explorer
CVE-2026-41075
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing them to read or modify data in the RT database. This issue has been fixed in versions 5.0.10 and 6.0.3. If developers are unable to upgrade immediately, they can temporarily work around this issue by restr
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"product":"rt","vendor":"bestpractical","versions":[{"status":"affected","version":">= 5.0.0, < 5.0.10"},{"status":"affected","version":">= 6.0.0, < 6.0.3"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:1caf4623137c6068af2d0ea3e75d02e60ed0d135ab7b6ff1b0a976b3851dba0d · sha256:6d5ea57389da85fe… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:1caf4623137c6068af2d0ea3e75d02e60ed0d135ab7b6ff1b0a976b3851dba0d · sha256:6d5ea57389da85fe… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-89","description":"CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:1caf4623137c6068af2d0ea3e75d02e60ed0d135ab7b6ff1b0a976b3851dba0d · sha256:6d5ea57389da85fe… · /containers/cna/problemTypes/0/descriptions/0
Source references
3 source assertions{"name":"https://github.com/bestpractical/rt/releases/tag/rt-5.0.10","tags":["x_refsource_MISC"],"url":"https://github.com/bestpractical/rt/releases/tag/rt-5.0.10"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:1caf4623137c6068af2d0ea3e75d02e60ed0d135ab7b6ff1b0a976b3851dba0d · sha256:6d5ea57389da85fe… · /containers/cna/references/1
{"name":"https://github.com/bestpractical/rt/releases/tag/rt-6.0.3","tags":["x_refsource_MISC"],"url":"https://github.com/bestpractical/rt/releases/tag/rt-6.0.3"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:1caf4623137c6068af2d0ea3e75d02e60ed0d135ab7b6ff1b0a976b3851dba0d · sha256:6d5ea57389da85fe… · /containers/cna/references/2
{"name":"https://github.com/bestpractical/rt/security/advisories/GHSA-7vf8-xv7w-97c6","tags":["x_refsource_CONFIRM"],"url":"https://github.com/bestpractical/rt/security/advisories/GHSA-7vf8-xv7w-97c6"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:1caf4623137c6068af2d0ea3e75d02e60ed0d135ab7b6ff1b0a976b3851dba0d · sha256:6d5ea57389da85fe… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.