A vulnerability, which was classified as critical, was found in Rocket.Chat up to 8.2.x. Affected is an unknown function. Executing a manipulation can lead to sql injection.
This vulnerability is handled as CVE-2026-29198. The attack can be executed remotely. There is not any exploit available.
You should upgrade the affected component.
