The vulnerability allows a user with editor permissions in one knowledge base category to view the titles and last updated timestamps of answers belonging to other categories through the global quick search. The titles may contain sensitive information about internal processes or customer issues, which could be disclosed to unauthorized personnel. The attack does not provide access to the answer content or related confidential data, but it does leak operational knowledge that might be leveraged in further reconnaissance or social engineering attacks.

Zammad open source helpdesk and customer support system. The issue exists in all releases prior to version 7.0.2, regardless of operating system or deployment environment. Users running versions 7.0.0 or 7.0.1 are affected; upgrading to 7.0.2 or later resolves the problem.

The CVSS v3.1 score is 2.1, indicating low overall severity. Exploitation requires that the attacker already be authenticated as a knowledge_base.editor in at least one category; no separate public exploit is required. Because the EPSS score is unavailable and the vulnerability is not listed in CISA’s KEV catalog, there is no evidence of active exploitation in the wild. Nevertheless, the information leakage could aid attackers in planning more targeted attacks against the organization.