CVE-2022-30124: Rocket.chat

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that allowed an attacker with physical access to a mobile device to bypass local authentication (PIN code).

Affected products

• Rocket.chat Rocket.chat: before 4.14.1.22788 (fixed in 4.14.1.22788)

Published 2022-09-23. Last modified 2026-06-17.