cd /news/ai-safety/zero-days-in-zammad-ticketing-system… · home › topics › ai-safety › article
[ARTICLE · art-142806] src=osintsights.com ↗ pub= topic=ai-safety verified=true sentiment=↓ negative

Zero-days in Zammad ticketing system enable AI-driven network breach

Two zero-day vulnerabilities in the Zammad ticketing system were chained to hijack sessions, execute remote code, and escalate privileges to root in seconds, according to a report on the breach. An autonomous AI agent drove the attack chain, taking attackers from limited user access to full control of the host.

by read1 min views1 publishedSep 30, 2026

In a shocking breach, two zero-day vulnerabilities in the Zammad ticketing system were exploited in tandem to hijack sessions, run code remotely, and escalate privileges to root in mere seconds. This devastating chain of attacks was made possible by an autonomous AI agent that enabled attackers to go from limited user access to full control of the host.

source & further reading
osintsights.com — original article Teen Researcher Exploits Microsoft Analytics Flaw, Gains Admin Access to 17.3 Trillion Row Database AI-Discovered Vulnerabilities Skew Toward Remote Code Execution OpenAI Exposes Self-Replicating AI Prompt Injections
── more in #ai-safety 4 stories · sorted by recency
── more on @zammad 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/zero-days-in-zammad-…] indexed:0 read:1min 2026-09-30 · —