Product
An authenticated SQL injection vulnerability (CVE-2026-44706) in Chatwoot versions 4.11.1 and earlier allows attackers to perform unauthorized database queries and exfiltrate sensitive data.