CWE-269: Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- openclawOpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Subagent Control Surface9.3 Critical
- openclawOpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate9.4 Critical
- openclawOpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes9.2 Critical
- lenovo pc manager, pcmanager +1 moreDuring an internal security assessment, a potential vulnerability was discovered in Lenovo PC...6.8 Medium
- studiocmsStudioCMS: REST API Missing Rank Check Allows Admin to Create Peer Admin Accounts4.7 Medium
- dell alienware command center (awcc), alienware command center +1 moreDell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Privilege...6.7 Medium
- jellyfin code-quality.yml, jellyfin +1 moreJellyfin Possible Organization/Secret Compromise from dangerous CI implementation10.0 Critical
- zoom rooms, workplace desktop, workplace virtual desktop infrastructure +1 more +3 moreZoom Clients for Windows - Improper Privilege Management7.8 High
- smub exactmetrics – google analytics dashboard for wordpress (website stats plugin)ExactMetrics 7.1.0 - 9.0.2 - Authenticated (Custom) Improper Privilege Management to Role Privilege Escalation via Settings Update8.8 High
- unknown datalogics ecommerce deliveryDatalogics Ecommerce Delivery < 2.6.60 - Unauthenticated Privilege Escalation9.8 Critical
- umbraco cms, umbraco-cms +1 moreUmbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks7.2 High
- freebsdJail chroot escape via fd exchange with a different jail7.5 High
- freebsdJail escape by a privileged user via nullfs8.8 High
- apich-organization rssnRSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface9.4 Critical
- videowhisper paid videochat turnkey site – html5 ppv live webcamsPaid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 - Authenticated (Author+) Privilege Escalation8.8 High
- huawei emui, harmonyos +1 moreVulnerability of improper verification in the email application. Impact: Successful exploitation...7.1 High
- international datacasting corporation sfx2100 satellite receiver, datacast sfx2100 firmware +1 moreIncorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX21009.2 Critical
- international datacasting corporation sfx2100 satellite receiver, datacast sfx2100 firmware +1 moreMultiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation8.6 High
- datacast sfx2100 firmware, international datacasting corporation sfx2100 satellite receiver +1 moreMultiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation8.6 High
- international datacasting corporation sfx2100 satellite receiver, datacast sfx2100 firmware +1 more`/bin/date` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE8.3 High
- international datacasting corporation sfx2100 satellite receiver, datacast sfx2100 firmware +1 more`/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE8.3 High
- tcs cognix platformAn authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0...8.8 High
- dlink dir-1253 firmwareAn issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc...9.8 Critical
- dani-garcia vaultwardenVaultwarden: Collection Management Operations Allowed Without `manage` Verification for Manager Role8.3 High
- dani-garcia vaultwardenVaultwarden: Privilege Escalation via Bulk Permission Update to Unauthorized Collections by Manager8.3 High
- cisco secure firewall management center (fmc), secure firewall management center +1 moreCisco Secure Firewall Management Center Command Injection Vulnerability6.0 Medium
openclawnpmOpenClaw's owner-only gateway tool access checks were incomplete in specific authenticated DM flows4.8 Medium- openclawOpenClaw < 2026.3.2 - Missing Owner Flag Validation in Discord Voice Transcript Handler5.8 Medium
openclawnpmOpenClaw: Sandboxed sessions_spawn(runtime="acp") bypassed sandbox inheritance and allowed host ACP initialization8.0 High- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration9.8 Critical
- cohesity tranzmanIncorrect access control in the component /opt/SRLtzm/bin/TapeDumper of Cohesity TranZman...7.2 High
- latepoint – calendar booking plugin for appointments and eventsLatePoint <= 5.2.7 - Authenticated (Agent+) Privilege Escalation8.8 High
- openclawOpenClaw < 2026.3.1 - Authorization Bypass in Agent Runs via Owner-Only Tool Access8.7 High
- openclawOpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn7.7 High
- asfhtgkdavid theshittheshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution8.4 High
- google androidIn multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic...7.8 High
- google androidIn __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the...8.4 High
- google androidIn createSessionInternal of PackageInstallerService.java, there is a possible way for an app to...7.8 High
- google androidIn loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to...9.8 Critical
- google androidIn VBMeta, there is a possible way to modify and resign VBMeta using a test key, assuming the...7.8 High
- dreamstechnologies listeeListee <= 1.1.6 - Unauthenticated Privilege Escalation9.8 Critical
- n8nn8n - SSO Enforcement Bypass via API6.0 Medium
- h44z wg-portal, wgportal wireguard portal +1 moreWireGuard Portal Vulnerable to Privilege Escalation to Admin via User Self-Update8.8 High
- vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 moreVMware Aria Operations privilege escalation vulnerability6.2 Medium
- cyberark endpoint privilege manager, cyberark software, a palo alto networks company endpoint privilege manager agent +1 moreCyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized...8.5 High
- bleon-ethical api-gateway-deployapi-gateway-deploy Affected by Exploitable Command Injection via Unprivileged Root Execution9.2 Critical
- solarwinds serv-uSolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability9.1 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor component9.8 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Netmonitor component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 morePrivilege escalation in the Messaging System component9.8 Critical
- Show moreLoading…