CWE-732: Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- openclawOpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelisting6.0 Medium
- acronis true imageLocal privilege escalation due to insecure folder permissions. The following products are...6.7 Medium
- hclsoftware bigfix platformHCL BigFix Platform is affected by insecure permissions on private cryptographic keys8.8 High
- dell appsyncDell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical...7.3 High
- anthropic claude sdk for python, anthropics anthropic-sdk-python +1 moreClaude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory Tool4.8 Medium
- tigervncIn TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate...8.5 High
- mattermost, mattermost server +1 moremmctl export download command doesn’t restrict permissions to created file to file owner5.0 Medium
- nodejs node, node.js +1 moreA flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync.native()`...3.3 Low
- codra panorama suite, panorama collaborative operation \& execution, panorama com +2 more +4 moreUnnecessary permissions on private keys of certificates installed by Network and Security Wizard3.3 Low
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Sequoia...4.9 Medium
- beeware briefcaseBriefcase: Windows MSI Installer Privilege Escalation via Insecure Directory Permissions7.3 High
- halloyHalloy has insecure file permissions on credential files4.8 Medium
- wazuhWazuh has Privilege Escalation to Root via Cluster Protocol File Write9.1 Critical
- apache airflowApache Airflow: DAG authorization bypass4.3 Medium
- apache airflowApache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata6.5 Medium
- openclawOpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript Files6.8 Medium
- buffalo terastation nas ts5400r, buffaloamericas terastation nas ts5400r firmware +1 moreBuffalo TeraStation TS5400R Excessive File Permissions Information Disclosure6.9 Medium
- b3log siyuanSiYuan renderSprig: missing admin check allows any user to read full workspace DB6.5 Medium
- asus business system control interfaceAn Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control...6.8 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability7.8 High
- assa abloy visionlineLocal Privilege Escalation Due to Writable Executable in Privileged Visionline Service Path5.8 Medium
- janitza umg 96rm-e 230v(5222062), umg 96rm-e 24v(5222063), weidmueller energy meter 750-230 (2540910000) +1 more +3 moreIncorrect Permission Assignment on power analyzer6.5 Medium
- acronis cyber protect 17, cyber protect +1 moreSensitive information disclosure due to improper configuration of a headless browser. The...5.5 Medium
- acronis cyber protect 17, cyber protect cloud agent, agent +1 more +3 moreCredentials are not deleted from Acronis Agent after plan revocation. The following products are...4.4 Medium
- acronis cyber protect cloud agent, agent +1 moreCredentials are not deleted from Acronis Agent after plan revocation. The following products are...4.4 Medium
- international datacasting corporation sfx2100 satellite receiver, datacast sfx2100 firmware +1 moreWorld-Writable, Root Owned/Run `/etc/udhcpc/default.script` in IDC SFX2100 Satellite Receiver Leads To Potential LPE8.5 High
- international datacasting corporation sfx2100 satellite receiver, datacast sfx2100 firmware +1 moreIDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable `/etc/resolv.conf`7.1 High
- filebrowserFile Browser: TUS Delete Endpoint Bypasses Delete Permission Check9.1 Critical
- linux-nfs nfs-utils, red hat ceph storage 8, enterprise linux 10 +13 more +15 moreNfs-utils: rpc.mountd in the nfs-utils privilege escalation6.5 Medium
- hallo welt! gmbh bluespiceImproper permission checks in Extension:NSFileRepo6.6 Medium
- grahampugh erase-installerase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded...6.6 Medium
- app-auto-patchInsecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to...7.8 High
- ibm storage scaleThe following vulnerabilities, which may affect IBM Storage Scale when a directory has a specific ACL composition and could lead to improper execute permissions, have been remediated in Storage Scale…6.6 Medium
- hp system event utilityHP System Event Utility – Denial of Service5.2 Medium
- iboysoft ntfs, ntfs for mac +1 moreiBoysoft NTFS for Mac contains a local privilege escalation vulnerability in its privileged...8.5 High
- openclawOpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn7.7 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root9.3 Critical
- owl opds, owlcyberdefense opds-talon +1 moreIncorrect Permission Assignment for Critical Resource in Owl opds8.5 High
- owl opds, owlcyberdefense opds-talon +1 moreIncorrect Permission Assignment for Critical Resource in Owl opds8.5 High
- owl opds, owlcyberdefense opds-talon +1 moreIncorrect Permission Assignment for Critical Resource in Owl opds6.8 Medium
- owl opds, owlcyberdefense opds-talon +1 moreIncorrect Permission Assignment for Critical Resource in Owl opds8.5 High
- owl opds, owlcyberdefense opds-talon +1 moreIncorrect Permission Assignment for Critical Resource in Owl opds8.5 High
- katacontainers kata containers, kata-containers, red hat confidential compute attestation +1 more +3 moreKata Container to Guest micro VM privilege escalation9.4 Critical
- tanium enforce recovery key portalInsecure file permissions in Enforce Recovery Key Portal6.5 Medium
- ibm concertMultiple Vulnerabilities in IBM Concert Software.7.4 High
- glory global solutions rbg-100Glory RBG-100 Recycler System Local Privilege Escalation via Insecure File Permissions8.5 High
- wondershare mobilegoMobileGo 8.5.0 - Insecure File Permissions8.5 High
- vm3max nextvpnNextVPN 4.10 - Insecure File Permissions8.5 High
- amd µprof, μprof +1 moreIncorrect permission assignment in AMD µProf may allow a local user-privileged attacker to...7.0 High
- Show moreLoading…