# Privilege escalation.

Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [TOTOLINK CP450 vsftpd vsftpd.conf least privilege violation](https://agentprime.io/advisories/CVE-2026-11554.md)
  `CVE-2026-11554` · CVE record: TOTOLINK CP450 · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Privilege escalation, CWE-272
- [imvks786 student_management_system Student Deletion Endpoint see.php improper authorization](https://agentprime.io/advisories/CVE-2026-11533.md)
  `CVE-2026-11533` · CVE record: imvks786 student_management_system · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Privilege escalation, Broken access control
- [imvks786 student_management_system Student Record add.php access control](https://agentprime.io/advisories/CVE-2026-11532.md)
  `CVE-2026-11532` · CVE record: imvks786 student_management_system · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Privilege escalation, Broken access control
- [Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules](https://agentprime.io/advisories/CVE-2026-44119.md)
  `CVE-2026-44119` · CVE record: Apache Software Foundation Apache HTTP Server · CVSS 5.5 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Privilege escalation
- [Mohammed-eid35 bank-management-system-springboot Transaction Endpoint TransactionController.java improper authorization](https://agentprime.io/advisories/CVE-2026-11521.md)
  `CVE-2026-11521` · CVE record: Mohammed-eid35 bank-management-system-springboot · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Privilege escalation, Broken access control
- [SourceCodester Inventory System Account Creation users_handler.php improper authorization](https://agentprime.io/advisories/CVE-2026-11519.md)
  `CVE-2026-11519` · CVE record: SourceCodester Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Privilege escalation, Broken access control
- [D-Link DCS-5615 Boa Webserver boa.conf least privilege violation](https://agentprime.io/advisories/CVE-2026-11497.md)
  `CVE-2026-11497` · CVE record: D-Link DCS-5615 · CVSS 6.9 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Privilege escalation, CWE-272
- [TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation](https://agentprime.io/advisories/CVE-2026-11494.md)
  `CVE-2026-11494` · CVE record: TOTOLINK AC1200 T8 · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Privilege escalation, CWE-272
- [D-Link DIR-823G vsftpd vsftpd.conf least privilege violation](https://agentprime.io/advisories/CVE-2026-11492.md)
  `CVE-2026-11492` · CVE record: D-Link DIR-823G · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Privilege escalation, CWE-272
- [Kushan2k student-management-system Profile Update Endpoint AdminController.php edit-admin improper authorization](https://agentprime.io/advisories/CVE-2026-11476.md)
  `CVE-2026-11476` · CVE record: Kushan2k student-management-system · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Privilege escalation, Broken access control
- [zilliztech deep-searcher has an Incorrect Privilege Assignment issue](https://agentprime.io/advisories/GHSA-43px-gpwc-q84v.md)
  `GHSA-43px-gpwc-q84v`, `CVE-2026-11466`, `PYSEC-2026-3567` · PyPI `deepsearcher`: affected `<=0.0.2`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Privilege escalation, Broken access control
- [Chengdu Everbrite Network Technology BeikeShop Stripe Plugin StripeController.php callback improper authorization](https://agentprime.io/advisories/CVE-2026-11462.md)
  `CVE-2026-11462` · CVE record: Chengdu Everbrite Network Technology BeikeShop · CVSS 6.9 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Privilege escalation, Broken access control
- [theonedev Pull Request issues canAccessIssue improper authorization](https://agentprime.io/advisories/CVE-2026-11441.md)
  `CVE-2026-11441` · CVE record: theonedev onedev · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Privilege escalation, Broken access control
- [theonedev REST API default-branch improper authorization](https://agentprime.io/advisories/CVE-2026-11440.md)
  `CVE-2026-11440` · CVE record: theonedev onedev · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Privilege escalation, Broken access control
- [theonedev Parent Project projects improper authorization](https://agentprime.io/advisories/CVE-2026-11439.md)
  `CVE-2026-11439` · CVE record: theonedev onedev · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Privilege escalation, Broken access control
- [theonedev projects improper authorization](https://agentprime.io/advisories/CVE-2026-11438.md)
  `CVE-2026-11438` · CVE record: theonedev onedev · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Privilege escalation, Broken access control
- [Shopper: Authorization bypass and RBAC privilege escalation in team settings](https://agentprime.io/advisories/GHSA-c3qp-2ggw-xjg7.md)
  `GHSA-c3qp-2ggw-xjg7`, `CVE-2026-47744`, `PKSA-5g52-7x8y-w2y1` · Packagist `shopper/framework`: affected `<2.8.0`, fixed in `2.8.0` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2026 · Tags: Privilege escalation, Broken access control
- [Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation](https://agentprime.io/advisories/CVE-2026-11423.md)
  `CVE-2026-11423` · CVE record: Altium Altium Enterprise Server · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2026 · Tags: Path traversal, Privilege escalation
- [Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis Session](https://agentprime.io/advisories/CVE-2025-5088.md)
  `CVE-2025-5088` · CVE record: Arista Networks EOS / CloudVision eXchange (CVX) · CVSS 8.7 High · Not analysed yet · Published 5 Jun 2026 · Tags: Privilege escalation
- [tittuvarghese CollegeManagementSystem Admin admin_page.php improper authorization](https://agentprime.io/advisories/CVE-2026-11336.md)
  `CVE-2026-11336` · CVE record: tittuvarghese CollegeManagementSystem · CVSS 5.3 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Privilege escalation, Broken access control
- [SourceCodester Ship Ferry Ticket Reservation System admin improper authorization](https://agentprime.io/advisories/CVE-2026-10876.md)
  `CVE-2026-10876` · CVE record: SourceCodester Ship Ferry Ticket Reservation System · CVSS 5.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation, Broken access control
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-11308.md)
  `CVE-2026-11308` · CVE record: Google Chrome · CVSS 6.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-11296.md)
  `CVE-2026-11296` · CVE record: Google Chrome · CVSS 7.5 High · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-11295.md)
  `CVE-2026-11295` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-11276.md)
  `CVE-2026-11276` · CVE record: Google Chrome · CVSS 5.1 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-11229.md)
  `CVE-2026-11229` · CVE record: Google Chrome · CVSS 6.1 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [Execution with unnecessary privileges in Google Chrome](https://agentprime.io/advisories/CVE-2026-11167.md)
  `CVE-2026-11167` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-11108.md)
  `CVE-2026-11108` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-11103.md)
  `CVE-2026-11103` · CVE record: Google Chrome · CVSS 7.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts](https://agentprime.io/advisories/GHSA-v39m-97p8-gqg7.md)
  `GHSA-v39m-97p8-gqg7`, `CVE-2026-48010`, `PKSA-fstf-sh35-tmx7`, `PKSA-xbrd-fvys-3t24` · Packagist `shopware/core` and 1 more: affected `<6.6.10.18 || >=6.7.0.0, <6.7.10.1`, fixed in `6.6.10.18`, `6.7.10.1` · CVSS 6.5 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [MISP user edit endpoint mass assignment vulnerability allows unauthorized user account modification](https://agentprime.io/advisories/CVE-2026-10868.md)
  `CVE-2026-10868` · CVE record: misp misp · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws](https://agentprime.io/advisories/CVE-2026-10843.md)
  `CVE-2026-10843` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 and 1 more · CVSS 7.2 High · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [Local Privilege Escalation in VPN Client](https://agentprime.io/advisories/CVE-2025-12694.md)
  `CVE-2025-12694` · CVE record: Forcepoint VPN Client · CVSS 8.5 High · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [Broadcast Receiver Privilege Escalation](https://agentprime.io/advisories/CVE-2026-49189.md)
  `CVE-2026-49189` · CVE record: Acer Connect M6E 5G Portable WiFi Router · CVSS 8.5 High · Not analysed yet · Published 4 Jun 2026 · Tags: Privilege escalation
- [Execution with unnecessary privileges in Acronis DeviceLock DLP](https://agentprime.io/advisories/CVE-2026-42061.md)
  `CVE-2026-42061` · CVE record: Acronis Acronis DeviceLock DLP · CVSS 7.3 High · Not analysed yet · Published 3 Jun 2026 · Tags: Privilege escalation
- [WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2025-15656.md)
  `CVE-2025-15656` · CVE record: Mojoomla School Management · CVSS 8.8 High · Not analysed yet · Published 3 Jun 2026 · Tags: Privilege escalation
- [SourceCodester Online Boat Reservation System Administrative Endpoint improper authorization](https://agentprime.io/advisories/CVE-2026-10693.md)
  `CVE-2026-10693` · CVE record: SourceCodester Online Boat Reservation System · CVSS 5.3 Medium · Not analysed yet · Published 3 Jun 2026 · Tags: Privilege escalation, Broken access control
- [WordPress Masteriyo LMS PRO plugin <= 2.20.0 - Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2025-53209.md)
  `CVE-2025-53209` · CVE record: Themeisle Masteriyo LMS PRO · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jun 2026 · Tags: Privilege escalation
- [Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'](https://agentprime.io/advisories/CVE-2026-8206.md)
  `CVE-2026-8206` · CVE record: themeum Kirki – Freeform Page Builder, Website Builder & Customizer · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jun 2026 · Tags: Privilege escalation
- [PackageKit API pk-transaction.c g_file_test improper authorization](https://agentprime.io/advisories/CVE-2026-10294.md)
  `CVE-2026-10294` · CVE record: PackageKit · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation, Broken access control
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-28586.md)
  `CVE-2026-28586` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0091.md)
  `CVE-2026-0091` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0089.md)
  `CVE-2026-0089` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0086.md)
  `CVE-2026-0086` · CVE record: Google Android · CVSS 6.8 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0055.md)
  `CVE-2026-0055` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Path traversal, Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0050.md)
  `CVE-2026-0050` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0048.md)
  `CVE-2026-0048` · CVE record: Google Android · CVSS 6.8 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0046.md)
  `CVE-2026-0046` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0016.md)
  `CVE-2026-0016` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0009.md)
  `CVE-2026-0009` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [DevaslanPHP project-management Ticket KanbanScrumHelper.php recordUpdated improper authorization](https://agentprime.io/advisories/CVE-2026-10285.md)
  `CVE-2026-10285` · CVE record: DevaslanPHP project-management · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation, Broken access control
- [DevaslanPHP project-management Livewire ViewTicket.php doDeleteComment improper authorization](https://agentprime.io/advisories/CVE-2026-10284.md)
  `CVE-2026-10284` · CVE record: DevaslanPHP project-management · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation, Broken access control
- [Bottelet DaybydayCRM DocumentsController.php view improper authorization](https://agentprime.io/advisories/CVE-2026-10282.md)
  `CVE-2026-10282` · CVE record: Bottelet DaybydayCRM · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation, Broken access control
- [j3k0 mcp-google-workspace MCP Gmail Tool gmail.ts saveToDisk access control](https://agentprime.io/advisories/CVE-2026-10277.md)
  `CVE-2026-10277` · CVE record: j3k0 mcp-google-workspace · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation, Broken access control
- [a4m4 Student-Management-System deleteform.php improper authorization](https://agentprime.io/advisories/CVE-2026-10272.md)
  `CVE-2026-10272` · CVE record: a4m4 Student-Management-System · CVSS 6.9 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation, Broken access control
- [decolua 9router HTTP Header dashboardGuard.js isAuthenticated improper authorization](https://agentprime.io/advisories/CVE-2026-10269.md)
  `CVE-2026-10269` · CVE record: decolua 9router · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation, Broken access control
- [WordPress Contest Gallery Pro plugin <= 29.0.1 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-42680.md)
  `CVE-2026-42680` · CVE record: Wasiliy Strecker / ContestGallery developer Contest Gallery Pro · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [WordPress AIWU plugin <= 1.4.17 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-48879.md)
  `CVE-2026-48879` · CVE record: Sergey AIWU · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}](https://agentprime.io/advisories/GHSA-g8rr-7rj2-f627.md)
  `GHSA-g8rr-7rj2-f627`, `CVE-2026-47412`, `PYSEC-2026-2934` · PyPI `praisonai-platform`: affected `<0.1.4`, fixed in `0.1.4` · CVSS 8.1 High · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation, Broken access control
- [praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}](https://agentprime.io/advisories/GHSA-rcmc-q9rj-4wmq.md)
  `GHSA-rcmc-q9rj-4wmq`, `CVE-2026-47411`, `PYSEC-2026-2937` · PyPI `praisonai-platform`: affected `<0.1.4`, fixed in `0.1.4` · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation, Broken access control

Newest: <https://agentprime.io/advisories/tag/privilege-escalation.md>
Older: <https://agentprime.io/advisories/tag/privilege-escalation.md?cursor=WyIyMDI2LTA2LTAxVDE0OjIzOjA4LjAwMDAwMFoiLCJHSFNBLXJjbWMtcTlyai00d21xIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=privilege-escalation&cursor=WyIyMDI2LTA2LTA4VDE3OjQ1OjEzLjcyMzAwMFoiLCJDVkUtMjAyNi0xMTU1NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/privilege-escalation/?cursor=WyIyMDI2LTA2LTA4VDE3OjQ1OjEzLjcyMzAwMFoiLCJDVkUtMjAyNi0xMTU1NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.