---
id: 9165
title: "[PT-BR] CVE-2026-44706: SQL Injection in Chatwoot FilterService"
cve: CVE-2026-44706
source_domain: yokai.hakaisecurity.io
source_url: "https://yokai.hakaisecurity.io/pt-br-cve-2026-44706-sql-injection-in-chatwoot-filterservice/"
published_at: "2026-06-05T19:17:35Z"
tags: ["vulnerability-research", "sql-injection", "research"]
phying_url: "https://phying.com/item/9165"
lang: en
---

# [PT-BR] CVE-2026-44706: SQL Injection in Chatwoot FilterService

## Summary

Resumo A Equipe de Pesquisa da Hakai identificou uma vulnerabilidade crítica de Injeção de SQL nas versões do Chatwoot <= 4.11.1 que permite a qualquer agente autenticado ler todo o banco de dados PostgreSQL, incluindo credenciais de usuários e tokens de API. A vulnerabilidade reside no método FilterService, onde a entrada do usuário é inserida diretamente […]

## Intelligence Metadata

- **Sources:** yokai.hakaisecurity.io
- **CVE:** CVE-2026-44706
- **Published:** 2026-06-05T19:17:35Z
- **Original:** https://yokai.hakaisecurity.io/pt-br-cve-2026-44706-sql-injection-in-chatwoot-filterservice/
- **Phying News:** https://phying.com/item/9165