Insecure Defaults

Zendesk Chat Attachments: An Insecure Default Worth Checking

While working with a client, we discovered that Zendesk's chat widget allows unauthenticated access to file attachments by default. Here's what we found and how to fix it.

David Mound

2026-03-10

12 min read