An unauthenticated access vulnerability in Chatwoot allows attackers to create arbitrary blobs, potentially leading to unauthorized data storage and system manipulation.

The application fails to perform proper capability checks on ActiveStorage direct upload functions. This allows an unauthenticated attacker to interact with sensitive storage functions without valid credentials.

An attacker can leverage this vulnerability to perform unauthorized actions, such as storing malicious files or consuming storage resources, which could lead to further compromise. With a CVSS score of 8.2, this vulnerability poses a severe risk to application integrity and data security.

Immediate Action: Update the Chatwoot installation to version 4.16.0 or later immediately.

Proactive Monitoring: Review storage bucket logs and application access logs for suspicious file upload activity or unauthorized API requests to the ActiveStorage endpoint.

Compensating Controls: Restrict access to the application via a Web Application Firewall, specifically blocking requests directed at the storage upload endpoints from untrusted network ranges.

Public Exploit Available: Unknown

The severity of this authentication bypass necessitates an immediate update to version 4.16.0. Organizations should treat this as a high-priority task to prevent potential exploitation of the file storage system and ensure the security of the broader application environment.