Zero-days in Zammad ticketing system enable AI-driven network breach

Two zero-day vulnerabilities in the Zammad ticketing system were chained to hijack sessions, execute remote code, and escalate privileges to root in seconds, according to a report on the breach. An autonomous AI agent drove the attack chain, taking attackers from limited user access to full control of the host.

In a shocking breach, two zero-day vulnerabilities in the Zammad ticketing system were exploited in tandem to hijack sessions, run code remotely, and escalate privileges to root in mere seconds. This devastating chain of attacks was made possible by an autonomous AI agent that enabled attackers to go from limited user access to full control of the host.