CVEvulnerability

CVE-2026-20773

8.5 HIGH Published 2026-09-14 Modified 2026-09-18 Official page ↗
Status
Awaiting Analysis
Published
2026-09-14
Last modified
2026-09-18
Assigner
[email protected]
CVSS 4.0 ([email protected])
8.5 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-863

Description

A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions.

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References