CWE-269: Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- nousresearch hermes-agentNousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox6.9 Medium
- wishlist member memberWishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_get_screen' AJAX action8.8 High
- wishlist member memberWishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX action8.8 High
- wishlist member memberWishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_export_settings' AJAX Action8.8 High
- wishlist member memberWishList Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Generate API Secret Key via 'wlm3_generate_api_key' AJAX action8.8 High
- nezhahq nezhaNezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron9.9 Critical
- microsoft global secure access, global secure access (gsa) +1 moreMicrosoft Global Secure Access (GSA) Information Disclosure Vulnerability7.5 High
- goauthentik authentikauthentik: Privilege Escalation via User PATCH: Superuser Group Assignment Bypasses enable_group_superuser8.1 High
- themewant easy elements for elementor – addons & website templatesEasy Elements for Elementor – Addons & Website Templates <= 1.4.5 - Unauthenticated Privilege Escalation via 'custom_meta' Parameter8.8 High
- containerdcontainerd user ID handling bypass allows runAsNonRoot evasion7.3 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS below 9.5.0 and below is vulnerable to password change without reauthorization and session-hardening bypass.5.3 Medium
- hulumi policies@hulumi/policies before 1.3.2 Admin Policy Bypass9.3 Critical
- fissionFission builder accepts arbitrary buildcmd strings from Environment.spec.builder.command, allowing the builder pod to invoke arbitrary executables6.9 Medium
- fissionFission runtime pods automount the fission-fetcher service-account token into the user function container, granting function code namespace-wide secret / configmap read8.7 High
- divi engine form builderDivi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'9.8 Critical
- freebsdIncorrect libcap_net limitation list manipulation6.5 Medium
- bestpractical rt, request tracker +1 moreRT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint9.1 Critical
- thorsten phpmyfaqphpMyFAQ - Insecure Direct Object Reference in User Password API8.7 High
- edmon.parker read more & accordionRead More & Accordion <= 3.5.7 - Privilege Escalation via importData8.8 High
- themewant easy elements for elementor – addons & website templatesEasy Elements for Elementor <= 1.4.4 - Unauthenticated Privilege Escalation via easyel_handle_register9.8 Critical
- budibaseBudibase: Missing Cache Invalidation on Public API Role Unassignment Allows Revoked Users to Retain Privileges for Up to 1 Hour4.2 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in the WebRTC: Audio/Video component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Application Update component8.8 High
- mullvad vpn, mullvadvpn-app +1 moreMullvad VPN for macOS: Local Privilege Escalation via unverified bundle path in installer7.3 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Security component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Enterprise Policies component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Workers component8.8 High
- No product listedThe LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote...9.8 Critical
- budibaseBudibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configuration8.8 High
- No product listedThermo Fisher Scientific Torrent Suite Dx through 5.14.2 has a privilege escalation vulnerability...8.8 High
- tigroumeow ai engine – the chatbot, ai framework & mcp for wordpressAI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Token8.8 High
- debian linux, linux kernel, red hat nvidia for rhel 10 +25 more +27 moreptrace: slightly saner 'get_dumpable()' logic7.1 High
- shabti frontend admin by dynamiappsFrontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Form8.8 High
- openwebui open webui, open-webui +1 moreOpen WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution7.2 High
- wger-project wgerwger: Privilege escalation via trainer-login session chaining allows gym trainers to impersonate gym managers8.1 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, device management portal (admp), ryzen™ 3000 series desktop processors +27 more +29 moreImproper privilege management in the KVM key download component could allow an attacker to swap...6.0 Medium
- wpdevteam essential addons for elementor – popular elementor templates & widgetsEssential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user6.5 Medium
- anthropic claude desktop, anthropics claude-code +1 moreClaude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService8.5 High
- churchcrm crmChurchCRM: Cross-Site Request Forgery (CSRF) Leading to Admin Privilege Escalation8.8 High
- requarks wiki, wiki.js +1 moreWiki.js: Privilege Escalation via Missing Group Validation in users.update8.6 High
- microsoft dynamics 365, dynamics 365 customer insights +1 moreMicrosoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability7.7 High
- outlineOutline: OAuth Scope Validation Logic Error Allows Privilege Escalation to Wildcard API Access8.2 High
- pi-holePi-hole: Local privilege escalation via config-controlled path in root-executed service hooks8.8 High
- apple macosAn information leakage was addressed with additional validation. This issue is fixed in macOS...7.5 High
- apple ipados, macos, tvos +4 more +6 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and...8.8 High
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.8 High
- apple macosA consistency issue was addressed with improved state handling. This issue is fixed in macOS...7.8 High
- microsoft local-path-provisioner, suse local path provisioner +1 moreLocal Path Provisioner: HelperPod Template Injection8.7 High
- dell ecs, objectscale, elastic cloud storage +2 moreDell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0,...6.7 Medium
- Show moreLoading…