Issues

• Forward message: hidden DMs can't be picked as target, intended?

  type: bug
  RocketChat/Rocket.Chat#42492 · Filter by author ndo84bw opened on Oct 1, 2026

• IframeModal message listener does not validate message source

  type: bugtype: feature
  RocketChat/Rocket.Chat#42490 · Filter by author electromist opened on Oct 1, 2026

• "Banner not found"

  type: bug
  RocketChat/Rocket.Chat#42489 · Filter by author sasoo34 opened on Oct 1, 2026
  1

• Country Flags Don't Display on Microsoft OS after 8.8.1 Upgrade

  type: bug
  RocketChat/Rocket.Chat#42487 · Filter by author JuliaBe11 opened on Oct 1, 2026

• push.token registration overwrites other users' push documents

  type: bug
  RocketChat/Rocket.Chat#42485 · Filter by author Victor725 opened on Oct 1, 2026
  1

• statistics.telemetry lets any logged-in user $inc arbitrary settings

  type: bug
  RocketChat/Rocket.Chat#42484 · Filter by author Victor725 opened on Oct 1, 2026

• users.2fa.sendEmailCode: unauthenticated email flooding + attacker-driven 2FA code invalidation

  type: bug
  RocketChat/Rocket.Chat#42483 · Filter by author Victor725 opened on Oct 1, 2026

• WebDAV integration: cross-user use of stored credentials + path traversal in uploadFileToWebdav

  type: bug
  RocketChat/Rocket.Chat#42482 · Filter by author Victor725 opened on Oct 1, 2026

• chat.getDeletedMessages leaks deleted-message IDs of rooms the caller cannot access

  type: bug
  RocketChat/Rocket.Chat#42481 · Filter by author Victor725 opened on Oct 1, 2026

• SAML assertion validity check fails open on unparseable dates

  RocketChat/Rocket.Chat#42480 · Filter by author Victor725 opened on Oct 1, 2026

• Unbounded zlib.inflateRaw on unauthenticated SAML Redirect route (decompression bomb)

  type: bug
  RocketChat/Rocket.Chat#42479 · Filter by author Victor725 opened on Oct 1, 2026

• Livechat visitor identity takeover via id + self-chosen token

  type: bug
  RocketChat/Rocket.Chat#42478 · Filter by author Victor725 opened on Oct 1, 2026

• As we implement these nodes, remove these tests

  todo
  RocketChat/Rocket.Chat#42442 · Filter by author github-actions opened on Sep 29, 2026

• Bug: escapeHtml result discarded in sendTranscript leaving attachment description unescaped

  type: bug
  RocketChat/Rocket.Chat#42432 · Filter by author rohanbuildai opened on Sep 29, 2026
  2

• Bug: Missing return in removeContactsByVisitorId causes execution fall-through

  type: bug
  RocketChat/Rocket.Chat#42430 · Filter by author rohanbuildai opened on Sep 29, 2026
  3

• 邀请 rocket.chat 加入 GithubStarMate，让更多人发现你的作品

  RocketChat/Rocket.Chat#42424 · Filter by author gazelle1699 opened on Sep 29, 2026

• bug: mongo-adapter document elemMatch stops at scalar array entries

  type: bug
  RocketChat/Rocket.Chat#42404 · Filter by author YashAnand69 opened on Sep 27, 2026
  1

• bug: mongo-adapter bitwise filters read outside Uint8Array views

  type: bug
  RocketChat/Rocket.Chat#42401 · Filter by author YashAnand69 opened on Sep 27, 2026

• bug: mongo-adapter equality matches unrelated BSON value types

  type: bug
  RocketChat/Rocket.Chat#42399 · Filter by author YashAnand69 opened on Sep 27, 2026

• bug: mongo-adapter comparator ignores or reverses supported sort directions

  type: bug
  RocketChat/Rocket.Chat#42397 · Filter by author YashAnand69 opened on Sep 27, 2026

• isAbsoluteURL treats uppercase HTTP/HTTPS schemes as relative paths

  type: bug
  RocketChat/Rocket.Chat#42395 · Filter by author YashAnand69 opened on Sep 27, 2026
  1

• Push text truncation can split an emoji into an invalid UTF-16 surrogate

  type: bug
  RocketChat/Rocket.Chat#42393 · Filter by author YashAnand69 opened on Sep 27, 2026

• streamToBuffer never settles when a readable closes before end

  type: bug
  RocketChat/Rocket.Chat#42391 · Filter by author YashAnand69 opened on Sep 27, 2026

• Five seeded permissions are never checked

  type: bug
  RocketChat/Rocket.Chat#42370 · Filter by author Santoshkumarpuppala opened on Sep 25, 2026
  1

• Arbitrary Local File Read via downloadPublicImportFile API

  type: bug
  RocketChat/Rocket.Chat#42355 · Filter by author Pritam-2002 opened on Sep 25, 2026
  1