CVE-2026-12964

A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution. This flaw can only be exploited after authenticating with an admin-privileged service account.

The vulnerability could allow an attacker to gain unauthorized access. The description does not specify which resource is affected or the conditions for exploitation.

The vulnerability could lead to a high privileged authenticated user performing a remote code execution attack. The description does not identify a specific component.

A vulnerability related to broken access control may allow an authenticated user to perform horizontal privilege escalation. It only affects specific configurations.

The described vulnerability could allow an attacker to compromise a system. Technical details are not provided in the description.

There is a possible persistent denial of service due to resource exhaustion in multiple places. This could lead to local denial of service with no additional execution privileges needed.

In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed.

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.