Privilege escalation.

Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability

• Microsoft Global Secure Access (GSA)
• Privilege escalation

authentik: Privilege Escalation via User PATCH: Superuser Group Assignment Bypasses enable_group_superuser

• authentik
• Privilege escalation

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability.

• Dell PowerFlex Manager (Appliance)
• Dell PowerFlex Manager (Rack)
• Privilege escalation

Easy Elements for Elementor – Addons & Website Templates <= 1.4.5 - Unauthenticated Privilege Escalation via 'custom_meta' Parameter

• themewant Easy Elements for Elementor – Addons & Website Templates
• Privilege escalation

Concrete CMS has a session-hardening bypass and allows password change without reauthorization

• Privilege escalation
• Broken access control

<9.5.1 · fixed in 9.5.1

containerd user ID handling bypass allows runAsNonRoot evasion

• Privilege escalation
• Memory corruption

>=1.7.27, <1.7.32 · fixed in 1.7.32

@hulumi/policies: CIS 1.16 admin policy bypass for inline and attached IAM policies

• Privilege escalation

<1.3.2 · fixed in 1.3.2

Fission builder accepts arbitrary buildcmd strings from Environment.spec.builder.command, allowing the builder pod to invoke arbitrary executables

• Command injection
• Privilege escalation

<1.23.0 · fixed in 1.23.0

Fission runtime pods automount the fission-fetcher service-account token into the user function container, granting function code namespace-wide secret / configmap read

• Privilege escalation
• Information disclosure

<1.23.0 · fixed in 1.23.0

Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

• Divi Engine Divi Form Builder
• Privilege escalation

Incorrect libcap_net limitation list manipulation

• FreeBSD
• Privilege escalation

LiteSpeed Technologies cPanel Plugin: LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to…

• LiteSpeed Technologies cPanel Plugin
• LiteSpeed Technologies WHM Plugin
• Privilege escalation

phpMyFAQ: IDOR Account Takeover

• Privilege escalation
• Broken access control

<4.1.3 · fixed in 4.1.3

Read More & Accordion <= 3.5.7 - Privilege Escalation via importData

• edmonparker Read More & Accordion
• Privilege escalation

Easy Elements for Elementor <= 1.4.4 - Unauthenticated Privilege Escalation via easyel_handle_register

• themewant Easy Elements for Elementor – Addons & Website Templates
• Privilege escalation

Automic Automation Agent Unix privilege escalation

• Broadcom Automic Automation
• Privilege escalation

Budibase: Missing Cache Invalidation on Public API Role Unassignment Allows Revoked Users to Retain Privileges for Up to 1 Hour

• Privilege escalation

<3.38.2 · fixed in 3.38.2

Privilege escalation in the WebRTC: Audio/Video component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Security component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Enterprise Policies component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the DOM: Workers component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Application Update component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Mullvad VPN for macOS: Local Privilege Escalation via unverified bundle path in installer

• mullvadvpn-app
• Privilege escalation
• CWE-345

The LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote attackers to escalate privileges by self-assigning an administrative role during registration.

• Privilege escalation

Budibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configuration

• Privilege escalation

<3.38.1 · fixed in 3.38.1

Thermo Fisher Scientific Torrent Suite Dx through 5.14.2 has a privilege escalation vulnerability that may allow an authenticated user with limited access privileges to gain unauthorized administrato…

• Privilege escalation

h2oai h2o-3 Rapids setproperty Primitive AstSetProperty.java exec access control

• h2oai h2o-3
• Privilege escalation
• Broken access control

Z-BlogPHP Commend Approval c_system_event.php CheckComment improper authorization

• Z-BlogPHP
• Privilege escalation
• Broken access control

Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization

• Open5GS
• Privilege escalation
• Broken access control

AI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Token

• tigroumeow AI Engine – The Chatbot, AI Framework & MCP for WordPress
• Privilege escalation

ptrace: slightly saner 'get_dumpable()' logic

• Linux kernel
• Privilege escalation

Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Form

• shabti Frontend Admin by DynamiApps
• Privilege escalation

Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts

• Privilege escalation
• Race condition

<0.9.0 · fixed in 0.9.0

Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution

• Privilege escalation
• Broken access control

<0.9.5 · fixed in 0.9.5

wger: Privilege escalation via trainer-login session chaining allows gym trainer to impersonate gym manager

• Privilege escalation

<=2.5 · no fixed version yet

Improper privilege management in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others

• AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
• AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
• Privilege escalation

Privilege Escalation in Comarch ERP Optima

• Comarch ERP Optima
• Privilege escalation

Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user

• wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets
• Privilege escalation

Execution with unnecessary privileges in WebPros cPanel and others

• WebPros cPanel
• WebPros WP Squared
• Privilege escalation

Claude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService

• anthropics claude-code
• Path traversal
• Privilege escalation

BIG-IP and BIG-IQ privilege escalation vulnerability

• F5 BIG-IP
• F5 BIG-IQ
• Privilege escalation

BIG-IP and BIG-IQ privilege escalation vulnerability

• F5 BIG-IP
• F5 BIG-IQ
• Privilege escalation

BIG-IP scripted monitor vulnerability

• F5 BIG-IP
• Privilege escalation

iControl SOAP vulnerability

• F5 BIG-IP
• Privilege escalation

Execution with unnecessary privileges in KDE plasma-login-manager

• KDE plasma-login-manager
• Privilege escalation

ChurchCRM: Cross-Site Request Forgery (CSRF) Leading to Admin Privilege Escalation

• CRM
• Privilege escalation
• Authentication bypass

Wiki.js: Privilege Escalation via Missing Group Validation in users.update

• requarks wiki
• Privilege escalation

Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability

• Microsoft Dynamics 365
• Privilege escalation

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

• Microsoft Dynamics 365 (on-premises) version 9.1
• Privilege escalation

Execution with unnecessary privileges in Dell PowerScale InsightIQ

• Dell PowerScale InsightIQ
• Privilege escalation

Outline: OAuth Scope Validation Logic Error Allows Privilege Escalation to Wildcard API Access

• outline
• Privilege escalation

Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks

• pi-hole
• Privilege escalation
• Broken access control

Information disclosure in Apple macOS

• Apple macOS
• Information disclosure
• Privilege escalation

Improper privilege management in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• Privilege escalation

Improper privilege management in Apple macOS

• Apple macOS
• Privilege escalation

Improper privilege management in Apple macOS

• Apple macOS
• Privilege escalation

Duplicate Advisory: OpenClaw's ACP child sessions inherit subagent security envelope constraints

• Privilege escalation

<2026.4.22 · fixed in 2026.4.22

Local Path Provisioner Vulnerable to HelperPod Template Injection

• Privilege escalation
• Code injection

<0.0.36 · fixed in 0.0.36

CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE

• Privilege escalation
• CWE-271

<1.28.3 || >=1.29.0, <1.29.1 · fixed in 1.28.3, 1.29.1

Improper privilege management in Dell ECS and others

• Dell ECS
• Dell ObjectScale
• Privilege escalation