A vulnerability was found in Rocket.Chat up to 8.4.x. It has been rated as critical. Affected is an unknown function of the file /api/v1/autotranslate.translateMessage of the component Message Endpoint. Performing a manipulation results in improper access controls.
This vulnerability is cataloged as CVE-2026-32994. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.
