Attack Chain

1. Attacker obtains valid authentication credentials for a low-privileged agent account in the target Chatwoot instance.
2. Attacker interacts with the /api/v1/accounts/{account_id}/conversations/filter API endpoint.
3. Attacker injects malicious SQL payloads into the request body, specifically targeting the is_greater_than operator parameters.
4. The vulnerable FilterService component processes the unparameterized input, executing the malicious SQL query on the PostgreSQL database.
5. Attacker employs boolean-based or time-based blind SQL injection techniques to infer database structure and content.
6. Attacker exfiltrates sensitive rows, specifically targeting user account tables, credentials, and API tokens.
7. Final objective is achieved: unauthorized access to administrative credentials and internal platform data.

Impact

Successful exploitation of this vulnerability allows an authenticated agent to bypass standard authorization controls and dump the entire PostgreSQL database. This results in the exposure of highly sensitive data, including customer PII, internal communication logs, and administrative API tokens, which could be leveraged for lateral movement or full platform takeover.

Recommendation

1. Upgrade all Chatwoot instances to a version later than 4.11.1 immediately.
2. Implement strict monitoring on the /api/v1/accounts/{account_id}/conversations/filter endpoint for anomalous HTTP request bodies containing SQL syntax characters (e.g., ', --, UNION, SELECT).
3. Review access logs for excessive or unusual activity originating from low-privileged agent accounts.
4. Perform a security audit of current agent permissions to ensure the principle of least privilege is enforced within the Chatwoot dashboard.