# \#security

**URL:** https://community.zammad.org/tag/security/34.md

[Latest](https://community.zammad.org/latest.md) · [Categories](https://community.zammad.org/categories.md) · [Tags](https://community.zammad.org/tags.md)

---

## [Take care: Local Privilege Escalation (CVE-2026-102490) is reported as being actively exploited](https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297)

<div class="topic-metadata">

**Author:** [@DD4PK](https://community.zammad.org/u/DD4PK)\
**Replies:** 2\
**Last updated:** [October 1, 2026, 7:48pm UTC](https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297 "2026-10-01T19:48:04Z")

</div>

Affected versions 1.5 to 7.1.0-alpha No user interaction required. If your instance is publicly exposed - patch urgently. More info here: And BleepingComputer:

---

## [🔐 Security Release: Zammad 7.0.1 & 6.5.4](https://community.zammad.org/t/security-release-zammad-7-0-1-6-5-4/19986)

<div class="topic-metadata">

**Author:** [@JuliaDenise](https://community.zammad.org/u/JuliaDenise)\
**Replies:** 0\
**Last updated:** [April 8, 2026, 11:01am UTC](https://community.zammad.org/t/security-release-zammad-7-0-1-6-5-4/19986 "2026-04-08T11:01:37Z")

</div>

Today, we’ve released security patches that address vulnerabilities in both the 7.0 and 6.5 branches. If you are not yet able to upgrade to version 7.0, the patches are also available for version 6.5. …

---

## [Make it possible to display only first name of agent to customer](https://community.zammad.org/t/make-it-possible-to-display-only-first-name-of-agent-to-customer/771)

<div class="topic-metadata">

**Author:** [@deadda7a](https://community.zammad.org/u/deadda7a)\
**Replies:** 5\
**Last updated:** [July 17, 2018, 9:09am UTC](https://community.zammad.org/t/make-it-possible-to-display-only-first-name-of-agent-to-customer/771 "2018-07-17T09:09:22Z")

</div>

Hi! Our customer support team brought to our attention that in Chats and Emails the full name of the agent is shown. They are not very happy with this and came to us telling us to turn that off, but this is not possible…

---

## [Proxy external links through zammad](https://community.zammad.org/t/proxy-external-links-through-zammad/1669)

<div class="topic-metadata">

**Author:** [@chesty](https://community.zammad.org/u/chesty)\
**Replies:** 0\
**Last updated:** [November 28, 2018, 2:39am UTC](https://community.zammad.org/t/proxy-external-links-through-zammad/1669 "2018-11-28T02:39:32Z")

</div>

Hi, It might be useful if zammad had a proxy server and rewrote external links found in emails and whatnot to load via it. So if an email had an image embedded in it with a url of http://somecompany.com/signatures/bob.d…