CVE-2026-48189 – Bypass DedicatedAgentToCustomerGroups Setting

CVE ID :CVE-2026-48189

Published : June 1, 2026, 4:16 a.m. | 16 minutes ago

Description :An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to other groups. Please note that the feature has to be anabled and CustomerGroupSupport has to be used to be affected.

This issue affects OTRS:

* 7.0.X
* 8.0.X
* 2023.X
* 2024.X
* 2025.X
* 2026.X before 2026.4.X

Severity: 5.7 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…