Zammad’s REST endpoint POST /api/v1/ai_assistance/text_tools/:id lacks a privilege check before version 7.0.1 and 6.5.4, allowing any authenticated user to execute AI text tools regardless of role. This improper access control enables unauthorized use of the system’s AI capabilities by authenticated users.

Systems running Zammad 7.0.0 or earlier, and 6.5.3 or earlier are affected. The vulnerability exists in the core web‑based helpdesk application and can be triggered through its API interface.

The CVSS score of 5.3 indicates medium severity. An attacker must be authenticated, but the exposed endpoint can be abused to misuse AI text tools. No EPSS score is available and the vulnerability is not listed in CISA’s KEV catalog, indicating a moderate but lower exploitation likelihood.