rocket.chat — Vulnerabilities & Security Advisories 8

Rocket.Chat serves as an open-source communication platform for team collaboration and customer engagement, offering real-time messaging, video conferencing, and workflow automation. Historically, it has faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation and access control flaws. While no major public security incidents have been widely documented, the platform's 8 recorded CVEs highlight ongoing security challenges in its rapidly evolving codebase. Its self-hosted nature provides organizations with control over their data but also places responsibility for patch management and hardening on users, making regular updates and security configurations essential for maintaining a secure deployment.