# Privilege escalation.

Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Gallagher Command Centre Server: An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server…](https://agentprime.io/advisories/CVE-2026-26053.md)
  `CVE-2026-26053` · CVE record: Gallagher Command Centre Server · CVSS 5.3 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: Privilege escalation
- [FOSSBilling's missing self-edit prevention in staff permission management allows persistent privilege escalation](https://agentprime.io/advisories/CVE-2026-53645.md)
  `CVE-2026-53645` · CVE record: FOSSBilling FOSSBilling · CVSS 8.5 High · Not analysed yet · Published 6 Jul 2026 · Tags: Privilege escalation
- [Duplicate Advisory: Craft CMS: Missing authorization check allows non-admin control panel users access to user registration metrics](https://agentprime.io/advisories/GHSA-rmj4-m9cp-mp9v.md)
  `GHSA-rmj4-m9cp-mp9v` · Packagist `craftcms/cms`: affected `>=4.0.0-RC1 || >=5.0.0-RC1`, no fixed version yet · CVSS 4.3 Medium · Withdrawn · Not analysed yet · Published 6 Jul 2026 · Tags: Privilege escalation
- [Formbricks Survey actions.ts access control](https://agentprime.io/advisories/CVE-2026-14792.md)
  `CVE-2026-14792` · CVE record: Formbricks · CVSS 6.9 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: Privilege escalation, Broken access control
- [SourceCodester Onlne Examination & Learning Management System Enrollment Management ajax_enroll.php improper authorization](https://agentprime.io/advisories/CVE-2026-14778.md)
  `CVE-2026-14778` · CVE record: SourceCodester Onlne Examination & Learning Management System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Privilege escalation, Broken access control
- [SourceCodester Onlne Examination & Learning Management System Registration Endpoint register.php privileges management](https://agentprime.io/advisories/CVE-2026-14719.md)
  `CVE-2026-14719` · CVE record: SourceCodester Onlne Examination & Learning Management System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Privilege escalation
- [SourceCodester Multi-Vendor Online Grocery Management System Master.php cancel_order improper authorization](https://agentprime.io/advisories/CVE-2026-14693.md)
  `CVE-2026-14693` · CVE record: SourceCodester Multi-Vendor Online Grocery Management System · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Privilege escalation, Broken access control
- [SourceCodester Multi-Vendor Online Grocery Management System Users.php save_users improper authorization](https://agentprime.io/advisories/CVE-2026-14690.md)
  `CVE-2026-14690` · CVE record: SourceCodester Multi-Vendor Online Grocery Management System · CVSS 6.9 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission](https://agentprime.io/advisories/GHSA-227r-jm2g-7cp4.md)
  `GHSA-227r-jm2g-7cp4`, `CVE-2026-50201` · NuGet `Steeltoe.Management.Endpoint` and 1 more: affected `<4.2.0`, fixed in `4.2.0` · CVSS 6.5 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Weaviate < 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role Assignment](https://agentprime.io/advisories/CVE-2026-59093.md)
  `CVE-2026-59093` · CVE record: weaviate weaviate · CVSS 8.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: Privilege escalation
- [OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority](https://agentprime.io/advisories/GHSA-6fvr-66p3-3qj4.md)
  `GHSA-6fvr-66p3-3qj4`, `CVE-2026-53814` · npm `openclaw`: affected `<2026.5.20`, fixed in `2026.5.20` · CVSS 8.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: Information disclosure, Privilege escalation, Broken access control
- [OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers](https://agentprime.io/advisories/GHSA-rggc-m335-3wvj.md)
  `GHSA-rggc-m335-3wvj`, `CVE-2026-53832` · npm `openclaw`: affected `<2026.5.18`, fixed in `2026.5.18` · CVSS 7.4 High · Not analysed yet · Published 2 Jul 2026 · Tags: Privilege escalation, Broken access control, Authentication bypass
- [Keycloak has privilege escalation via improper scope mapping enforcement](https://agentprime.io/advisories/GHSA-32h4-44jj-c5vx.md)
  `GHSA-32h4-44jj-c5vx`, `CVE-2026-9795` · Maven `org.keycloak:keycloak-services`: affected `<26.6.4`, fixed in `26.6.4` · CVSS 7.3 High · Not analysed yet · Published 1 Jul 2026 · Tags: Privilege escalation
- [WordPress PrivateContent plugin <= 9.9.2 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-57692.md)
  `CVE-2026-57692` · CVE record: LCweb PrivateContent · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jul 2026 · Tags: Privilege escalation
- [Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation](https://agentprime.io/advisories/CVE-2026-5136.md)
  `CVE-2026-5136` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Jul 2026 · Tags: Privilege escalation
- [Privilege Escalation in MCO](https://agentprime.io/advisories/CVE-2026-53902.md)
  `CVE-2026-53902` · CVE record: MyComplianceOffice MCO · CVSS 7.1 High · Not analysed yet · Published 1 Jul 2026 · Tags: Privilege escalation, Broken access control
- [LatePoint <= 5.6.3 - Authenticated (Custom+) Privilege Escalation to Administrator via 'order\[customer_id\]' Parameter](https://agentprime.io/advisories/CVE-2026-13228.md)
  `CVE-2026-13228` · CVE record: latepoint LatePoint – Calendar Booking Plugin for Appointments and Events · CVSS 8.8 High · Not analysed yet · Published 1 Jul 2026 · Tags: Privilege escalation
- [Dokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST Endpoint](https://agentprime.io/advisories/CVE-2026-12224.md)
  `CVE-2026-12224` · CVE record: wedevs Dokan Pro · CVSS 8.8 High · Not analysed yet · Published 1 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-14124.md)
  `CVE-2026-14124` · CVE record: Google Chrome · CVSS 7.8 High · Not analysed yet · Published 30 Jun 2026 · Tags: Privilege escalation
- [Capgo - Privilege Escalation via Cross-Scope RBAC Role Assignment](https://agentprime.io/advisories/CVE-2026-56247.md)
  `CVE-2026-56247` · CVE record: Capgo Capgo · CVSS 8.7 High · Not analysed yet · Published 30 Jun 2026 · Tags: Privilege escalation
- [Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation](https://agentprime.io/advisories/GHSA-m63v-2g9w-2w6v.md)
  `GHSA-m63v-2g9w-2w6v`, `CVE-2026-50566`, `GO-2026-5857` · Go `github.com/fission/fission`: affected `<1.24.0`, fixed in `1.24.0` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jun 2026 · Tags: Privilege escalation
- [Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container](https://agentprime.io/advisories/GHSA-8wcj-mfrc-jx5q.md)
  `GHSA-8wcj-mfrc-jx5q`, `CVE-2026-50565`, `GO-2026-5850` · Go `github.com/fission/fission`: affected `<1.24.0`, fixed in `1.24.0` · CVSS 4.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Privilege escalation, Information disclosure
- [Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape](https://agentprime.io/advisories/GHSA-gx55-f84r-v3r7.md)
  `GHSA-gx55-f84r-v3r7`, `CVE-2026-50564`, `GO-2026-5855` · Go `github.com/fission/fission`: affected `<1.24.0`, fixed in `1.24.0` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jun 2026 · Tags: Privilege escalation, Broken access control, CWE-693
- [Fission Container Executor Function PodSpec Injection Leading to Node Escape](https://agentprime.io/advisories/GHSA-v455-mv2v-5g92.md)
  `GHSA-v455-mv2v-5g92`, `CVE-2026-50563`, `GO-2026-5858` · Go `github.com/fission/fission`: affected `<1.24.0`, fixed in `1.24.0` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jun 2026 · Tags: Privilege escalation, Broken access control
- [Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover](https://agentprime.io/advisories/GHSA-wmgg-3p4h-48x7.md)
  `GHSA-wmgg-3p4h-48x7`, `CVE-2026-50545`, `GO-2026-5860` · Go `github.com/fission/fission`: affected `<1.24.0`, fixed in `1.24.0` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jun 2026 · Tags: Privilege escalation, Broken access control, CWE-693
- [Fission: MessageQueueTrigger scaler manager materializes Secret values into Deployment envvars and accepts arbitrary user PodSpec](https://agentprime.io/advisories/GHSA-7m8x-qg2j-4m3v.md)
  `GHSA-7m8x-qg2j-4m3v`, `GO-2026-5849` · Go `github.com/fission/fission`: affected `<1.24.0`, fixed in `1.24.0` · CVSS 8.1 High · Not analysed yet · Published 30 Jun 2026 · Tags: Information disclosure, Privilege escalation, Broken access control
- [Keycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider mapper](https://agentprime.io/advisories/CVE-2026-12388.md)
  `CVE-2026-12388` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Privilege escalation
- [Keycloak: keycloak: privilege escalation through hardcoded role mapper injection](https://agentprime.io/advisories/CVE-2026-4629.md)
  `CVE-2026-4629` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Privilege escalation
- [A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM](https://agentprime.io/advisories/CVE-2025-7406.md)
  `CVE-2025-7406` · CVE record: Nokia MantaRay NM · CVSS 7.8 High · Not analysed yet · Published 30 Jun 2026 · Tags: Privilege escalation
- [DeepMyst Mysti Contact Tracking ChannelBridge.ts \_isTrackedConversation improper authorization](https://agentprime.io/advisories/CVE-2026-13591.md)
  `CVE-2026-13591` · CVE record: DeepMyst Mysti · CVSS 2.3 Low · Not analysed yet · Published 29 Jun 2026 · Tags: Privilege escalation, Broken access control
- [SourceCodester Inventory Management System User Registration Endpoint users_handler.php access control](https://agentprime.io/advisories/CVE-2026-13568.md)
  `CVE-2026-13568` · CVE record: SourceCodester Inventory Management System · CVSS 6.9 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Privilege escalation, Broken access control
- [praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members](https://agentprime.io/advisories/GHSA-8g2p-pqm3-fcfh.md)
  `GHSA-8g2p-pqm3-fcfh`, `CVE-2026-47413`, `PYSEC-2026-480` · PyPI `praisonai-platform`: affected `<0.1.4`, fixed in `0.1.4` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: Privilege escalation, Broken access control
- [PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation](https://agentprime.io/advisories/GHSA-h8q5-cp56-rr65.md)
  `GHSA-h8q5-cp56-rr65`, `CVE-2026-47407`, `PYSEC-2026-482` · PyPI `praisonai-platform`: affected `<0.1.4`, fixed in `0.1.4` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: Privilege escalation, Broken access control
- [praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}](https://agentprime.io/advisories/GHSA-c2m8-4gcg-v22g.md)
  `GHSA-c2m8-4gcg-v22g`, `CVE-2026-47416`, `PYSEC-2026-481` · PyPI `praisonai-platform`: affected `<0.1.4`, fixed in `0.1.4` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: Privilege escalation, Broken access control
- [O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability.](https://agentprime.io/advisories/CVE-2026-22078.md)
  `CVE-2026-22078` · CVE record: OPPO O+ Connect · CVSS 7.3 High · Not analysed yet · Published 29 Jun 2026 · Tags: Privilege escalation
- [Feehi CMS API users access control](https://agentprime.io/advisories/CVE-2026-13544.md)
  `CVE-2026-13544` · CVE record: Feehi CMS · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Privilege escalation, Broken access control
- [CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization](https://agentprime.io/advisories/CVE-2026-13524.md)
  `CVE-2026-13524` · CVE record: CherryHQ cherry-studio · CVSS 6.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Privilege escalation, Broken access control
- [VoltAgent Memory REST API memory.handlers.ts handleGetMemoryConversation improper authorization](https://agentprime.io/advisories/CVE-2026-13511.md)
  `CVE-2026-13511` · CVE record: VoltAgent · CVSS 2.3 Low · Not analysed yet · Published 28 Jun 2026 · Tags: Privilege escalation, Broken access control
- [Gitea act_runner - Container Hardening Bypass via Workflow Container Options](https://agentprime.io/advisories/CVE-2026-58053.md)
  `CVE-2026-58053` · CVE record: Gitea act_runner · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Jun 2026 · Tags: Privilege escalation
- [Flaw in Linuxulator execution of setugid binaries](https://agentprime.io/advisories/CVE-2026-49413.md)
  `CVE-2026-49413` · CVE record: FreeBSD FreeBSD · CVSS 7.1 High · Not analysed yet · Published 27 Jun 2026 · Tags: Privilege escalation
- [sigqueue(2) missing capability mode restriction](https://agentprime.io/advisories/CVE-2026-45259.md)
  `CVE-2026-45259` · CVE record: FreeBSD FreeBSD · CVSS 6.5 Medium · Not analysed yet · Published 27 Jun 2026 · Tags: Privilege escalation
- [Invoice Generator <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover via 'user_id' Parameter](https://agentprime.io/advisories/CVE-2026-12415.md)
  `CVE-2026-12415` · CVE record: pravel Invoice Generator · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jun 2026 · Tags: Privilege escalation
- [WordPress Dokan Pro plugin <= 5.0.4 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-56033.md)
  `CVE-2026-56033` · CVE record: Dokan Multivendor Plugin Dokan Pro · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jun 2026 · Tags: Privilege escalation
- [WordPress Paytium plugin <= 5.0.2 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-56030.md)
  `CVE-2026-56030` · CVE record: paytiumsupport Paytium · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jun 2026 · Tags: Privilege escalation
- [WordPress Easy Elements for Elementor – Addons & Website Templates plugin <= 1.4.9 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-56028.md)
  `CVE-2026-56028` · CVE record: themewant Easy Elements for Elementor \&#8211; Addons \&amp; Website Templates · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jun 2026 · Tags: Privilege escalation
- [WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-56010.md)
  `CVE-2026-56010` · CVE record: Tyche Softwares. Abandoned Cart Pro for WooCommerce · CVSS 8.8 High · Not analysed yet · Published 26 Jun 2026 · Tags: Privilege escalation
- [WordPress Fusion Builder plugin <= 3.15.4 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-56008.md)
  `CVE-2026-56008` · CVE record: ThemeFusion Fusion Builder · CVSS 8.8 High · Not analysed yet · Published 26 Jun 2026 · Tags: Privilege escalation
- [Missing permission check in thr_kill2(2)](https://agentprime.io/advisories/CVE-2026-45256.md)
  `CVE-2026-45256` · CVE record: FreeBSD FreeBSD · CVSS 5.5 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Privilege escalation
- [Supabase Capgo - Unauthenticated Cross-Tenant Build-Time Accounting Poisoning via record_build_time RPC](https://agentprime.io/advisories/CVE-2026-56245.md)
  `CVE-2026-56245` · CVE record: Cap-go capgo · CVSS 8.8 High · Not analysed yet · Published 24 Jun 2026 · Tags: Privilege escalation
- [Privilege Escalation in Fortra File Integrity Monitoring (FIM)](https://agentprime.io/advisories/CVE-2026-12164.md)
  `CVE-2026-12164` · CVE record: Fortra File Integrity Monitoring (FIM) · CVSS 4.4 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Privilege escalation
- [motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)](https://agentprime.io/advisories/GHSA-qxvg-h7q2-hcxh.md)
  `GHSA-qxvg-h7q2-hcxh` · PyPI `motioneye`: affected `<0.44.0`, fixed in `0.44.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jun 2026 · Tags: Path traversal, Privilege escalation, Authentication bypass, Weak cryptography or TLS
- [Gogs's write-level collaborators can mutate admin-only repository settings via API](https://agentprime.io/advisories/GHSA-268j-37xf-pp52.md)
  `GHSA-268j-37xf-pp52`, `CVE-2026-52808`, `GO-2026-5065` · Go `gogs.io/gogs`: affected `<0.14.3`, fixed in `0.14.3` · CVSS 7.1 High · Not analysed yet · Published 23 Jun 2026 · Tags: Privilege escalation, Broken access control
- [Capgo - Authorization Bypass in API Key Management via App-Limited Keys](https://agentprime.io/advisories/CVE-2026-56225.md)
  `CVE-2026-56225` · CVE record: Capgo Capgo · CVSS 8.7 High · Not analysed yet · Published 23 Jun 2026 · Tags: Privilege escalation
- [Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:masters](https://agentprime.io/advisories/CVE-2026-54099.md)
  `CVE-2026-54099` · CVE record: Red Hat Red Hat OpenShift for Windows Containers 10.19 and 4 more · CVSS 8.8 High · Not analysed yet · Published 22 Jun 2026 · Tags: Privilege escalation
- [Vitepos < 3.4.2 - Outlet Manager+ Privilege Escalation](https://agentprime.io/advisories/CVE-2026-8157.md)
  `CVE-2026-8157` · CVE record: Unknown Vitepos · CVSS 8.8 High · Not analysed yet · Published 22 Jun 2026 · Tags: Privilege escalation
- [Browserbase Skills Autobrowse Trace Artifact default permission](https://agentprime.io/advisories/CVE-2026-12823.md)
  `CVE-2026-12823` · CVE record: Browserbase Skills · CVSS 4.8 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Privilege escalation, Broken access control
- [Capgo - Privilege Escalation via Broken Row Level Security in org_users](https://agentprime.io/advisories/CVE-2026-56251.md)
  `CVE-2026-56251` · CVE record: Capgo Capgo · CVSS 7.0 High · Not analysed yet · Published 21 Jun 2026 · Tags: Privilege escalation
- [Capgo - Privilege Escalation via SECURITY DEFINER Function apply_usage_overage](https://agentprime.io/advisories/CVE-2026-56239.md)
  `CVE-2026-56239` · CVE record: Capgo Capgo · CVSS 7.2 High · Not analysed yet · Published 21 Jun 2026 · Tags: Privilege escalation
- [BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure](https://agentprime.io/advisories/GHSA-m2v5-74w2-qhcj.md)
  `GHSA-m2v5-74w2-qhcj`, `CVE-2026-12799`, `PYSEC-2026-4072` · PyPI `litellm`: affected `<=1.82.2`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Privilege escalation, Broken access control
- [Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control](https://agentprime.io/advisories/CVE-2026-12786.md)
  `CVE-2026-12786` · CVE record: Ezbsystems UltraISO Premium Edition · CVSS 8.5 High · Not analysed yet · Published 21 Jun 2026 · Tags: Privilege escalation, Broken access control

Newest: <https://agentprime.io/advisories/tag/privilege-escalation.md>
Older: <https://agentprime.io/advisories/tag/privilege-escalation.md?cursor=WyIyMDI2LTA2LTIxVDA3OjE1OjA3Ljc1MjAwMFoiLCJDVkUtMjAyNi0xMjc4NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=privilege-escalation&cursor=WyIyMDI2LTA3LTA3VDIwOjMzOjM4LjY1ODAwMFoiLCJDVkUtMjAyNi01ODU4MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/privilege-escalation/?cursor=WyIyMDI2LTA3LTA3VDIwOjMzOjM4LjY1ODAwMFoiLCJDVkUtMjAyNi01ODU4MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.